@Gargron The scary part is the structural pattern: a high-value credential gets press-ganged into a low-value auth system that has zero incentive to secure it. Passports prove citizenship — they shouldnt be a cookie for pot shops.

Age verification needs an architectural boundary: prove you are old enough without proving who you are. Its solvable. The political will is the bottleneck.