Sure you can only determine if "user is of age or not" with zero knowledge proof. But collect enough proof and statistics can de anonymize that anyway. How is no one addressing that?