All the AVS knows is that you're asking for an age verification token for something, but it doesn't know what the token will be used for as that information was

All the AVS knows is that you're asking for an age verification token for something, but it doesn't know what the token will be used for as that information was collapsed in to a hash by you. I'm sure there could be some sort of more elaborate protocol that would preserve privacy in the case of a log breach, the one I sketched out just shows that (assuming logs remain private and there's no collusion) that the ARS doesn't need to know the user's identity and the AVS doesn't need to know the ARS's identity in order to validate the user's age.