It could be designed to be anonymous.
Government runs authentication service that has your personal details.
User creates account on platform Y, platform Y asks government service if your age is >18, service says y/n. Platform never finds out your personal details.
OAuth for age verification.
The government then knows all the services you use. No bueno.
There are better ways to do this including zk proofs, but you gotta work against people mass reselling them. Could do some rate limited tokens minted from a proof maybe.
Some concerns: - government gets a list of every website that requests your age - every website has to register with the government to initiate age verification checks
Which pretty much puts an end to any notion of an open internet. But maybe a system I prefer to one where a bunch of random startups have my age verification biometrics .
Would zero knowledge proofs work here? I'm not enough of a cryptography nerd so I don't know if it would be a practical use-case.
The government still knows your identity in this scenario, so it's a pretty limited form of anonymity (i.e. only suitable for activities the government isn't hostile to)