I seem to recall the bad part of the UK OSA was the requirement to write a plan about how you'd protect minors and submit it to the government, not anything to do with ID verification directly (although that's one way to design such a plan)?