You're conflating the open-source platform with the commercial service built on top of it. A true open-source platform—decentralized, no central operator, no user accounts—has no entity that can verify anyone's age. The science says verification works where data is collected and content is served. On a genuinely open-source project, there is no such point. But the moment you add servers, user accounts, and revenue, that's not just an open-source platform anymore; it's a business. Regulate that business. Exempt the codebase. That prevents the loophole while still holding harmful services accountable.