It is a good exercise, but in practice, what's the big deal?
Even if the app is bulletproof, age verification will get bypassed. Account sharing, file sharing, darknets, etc... It mostly prevents kids from stumbling upon content that isn't meant for them, but it won't resist deliberate attacks for long, especially if the parents are complacent. And for that, the EU Age Verification app looks fine, especially now what the easy bugs are fixed.
one has to understand that the point is not to protect kids, it never is, but to control online activities. also this is not an organic law, this is the result of intense lobbying by transnational corporations such as facebook, pushing hard for this and there are reports from inside the parliament that this is rushed to be release ASAP despite not being ready or properly tested.