The zero-knowledge proof angle is interesting but the real barrier is implementation

most platforms won't voluntarily adopt privacy-preserving verification when the surveillance version gives them more data. Regulation would need to mandate the privacy-preserving approach specifically, not just "verify age somehow.