Americans want kids shielded from the internet. They don’t trust websites or the government to do anything about it

79% of Americans back age verification for adult content (74% for social media), yet 85% say existing laws are easy to circumvent, per a Feb survey of 1,000 U.S. adults by All About Cookies. Respondents expressed strong data concerns—92% flagged at least one worry, including 79% on privacy/security, 66% on identity theft and 41% on profiling—and over half who faced verification used workarounds (45% switched sites, 22% used VPNs). Notably, 90% want strict verification for sports-betting platforms, while 55% prefer parental controls to government mandates and only ~20% view age-verification laws as the optimal solution.

Analysis

Lawmakers’ push to verify age creates a classic regulatory-productivity paradox: platforms must either collect sensitive identity data (raising breach and compliance costs) or adopt higher-friction, privacy-preserving attestation that degrades UX and ad monetization. Expect material reallocation of engineering budgets over the next 6–24 months toward cryptographic attestation, short-lived tokens, and vendor oversight — a non-linear increase in Opex for mid-sized publishers that have low marginal CAC to begin with.

Breaches at third-party verifiers change counterparty risk calculus. Buyers of verification services will demand contractual indemnities, higher cyber insurance, and real-time monitoring, turning a previously modular B2B service into a regulated utility with sticky, higher-margin incumbents. That favors vertically integrated cloud/security vendors who can bundle verification with edge services and DDoS/proxy protection, while pure-play ID vendors face margin compression and reputational haircuts after any publicized compromise.

Behaviorally, consumers will split: some will accept vetted, privacy-forward attestations (driving uptake of WARP-like VPNs and verifiable-credential frameworks), while others will migrate to unregulated endpoints and use obfuscation tools — shifting advertising spend and lifetime value profiles. The clearest near-term battleground is live sports advertising and wagering channels; if regulators or platforms restrict ad targeting, expect a revenue reallocation from linear broadcasters toward streaming and in-app ecosystems that can implement softer, non-PII signals for audience segmentation.

Key Decisions for Investors

• Long NET (Cloudflare) — 3–12 month horizon. Rationale: scaling edge and consumer-privacy products (WARP) position NET to sell privacy-preserving attestation bundled with CDN/firewall services; target +30% upside, stop at -18%. Catalysts: product disclosures or enterprise wins referencing attestation services.
• Long CRWD (CrowdStrike) — 6–18 month horizon. Rationale: surge in vendor-risk management, incident response and cyber insurance premium flows benefit endpoint/cloud-first security firms; target +25–40%, stop at -20%. Watch: meaningful slowdown in SaaS spend as a reversing catalyst.
• Pair trade — Long DKNG (DraftKings) / Short DIS (Disney) equal notional — 6–12 month horizon. Rationale: compliance costs and stricter ad controls on sports create share gains for digital-native, compliance-capable sportsbooks and compress linear sports ad pools that fund broadcasters; target spread widening of 30%, stop if both move >20% adverse. Key trigger: state-level enforcement changes or ad-policy announcements prior to major sports seasons.
• Buy puts on niche ID-verification vendors (select small-cap/private where available) as a hedge — 12 month horizon. Rationale: any high-profile breach or tightened privacy regs will rerate smaller vendors dependent on collecting PII; use options to limit downside while retaining upside if consolidation accelerates.