[ndriscoll]

Right, that's why the law should simply put liability on the providers to prevent access to children in the state + grant private cause of action to the parents. Then it becomes easy to prove their negligence (did the child in the state access the site?), and VPNs become immaterial. This is what e.g. Texas has done.

[raxxorraxor]

Would they be liable if a kid stole an id from an adult? If not, probably because the site had protection against minors accessing their site. If that is the requirement, a simple window asking for age would suffice, right?

[ndriscoll]

Would a physical store be liable for a kid stealing an id from an adult? Likely it depends on how passable it is that the id belongs to the kid. In any case, obviously a simple window asking age (or in person, simply asking "are you 18/21?") would not suffice.