Fuck that. California's way is the absolute maximum that should be done: When accounts get created on an operating system, allow the user to provide a completely unproven age. Then that age should be the only age check.

If the goal really is to just help parents prevent their kids from accessing inappropriate material, that's plenty. Anything else, and you're admitting the real goal is Big Brother style surveillance.