The bigger problem IMO is the implication that a device/OS must have a defined “account holder” that is associated with an actual person with an age. Nevermind that there isn’t any verification happening that could de-anonymize a user or be breached - as an administrator, am I responsible for ensuring users only use a specific account with the correct age identified? What about google or apple? Are devices meant for children to be locked down so that new users or accounts can’t be created to circumvent restrictions?

This law is too vague to have any meaningful impact on child safety, and the implications behind it make future erosion of privacy far more likely.