Age verification doesn't need to be a privacy footgun