4. A third party knows which service you frequent and can also deny the service 5. With device tracking and fingerprinting and leaked data, establishing your r

4. A third party knows which service you frequent and can also deny the service 5. With device tracking and fingerprinting and leaked data, establishing your real ID should ironically be childs play. You only look at the cryptographically relevant data of resource and auth provider, but there is contemporary data that makes including a third party a security issue. Otherwise #3 is wrong in any practical case. Age verification is already implemented for some services. I don't use them anymore. There are better alternatives.