Personally, I do think it’s a useful exercise to decide what your red-lines are when it comes to OS level age verification.

For me: Having a field in a database that could contain my DoB is acceptable. Having a prompt to populate it during first time set up is very concerning. Requiring that data to be validate by a third party is the red line.

If you don’t want to be boiled like a frog, bring a thermometer.

I’d say don’t risk it if you’re not based in the UK.

I have a .uk domain and had to provide proof of residence or something to nominet. I can’t remember the exact process now, but they did temporarily suspend my domain (without warning) until I contacted them.