They were relying on users to click I am definitely over 18. So there is by definition no possible way to know if children's data was being misused except to the extent it obviously was.

Age verification should have been a device side thing. I should be able to set up my kids phone / tablet with their date of birth and if they're not old enough then they can't access certain content. That way the only person who needs to verify the age of someone is me.

My ISP shipped with age restriction on by default, (personally I think that's a stupid default but that's a separate issue), but although annoying it was easy to get rid of because I'm the account holder. I didn't have to scan my ID though.

Anyway we all know this has been nothing to do with kids anyway.

This is about GDPR. A German court recently made a similar judgment wrt TikTok, but that is being appealed.