If they must implement this, client side TLS certs were built for this. You simply trust government approved age verification CAs on the server side and require

If they must implement this, client side TLS certs were built for this. You simply trust government approved age verification CAs on the server side and require users to provide a valid cert from them. No need to directly interact with or send data to the age verification service,