Who cares where they outsource the age verification to?
They have no business keeping my ID scan or face in any case. Because there's an 120% chance they'll end up on a public S3 bucket.