I wouldn't actually be so against AI face scans if the companies doing them actually deleted the data instantly after confirming a user's age. So, if there was a hack, the most info caught would be like one or two faces at a time as they would be deleted and processed so fast there would be barely any info. Maybe some sort of encryption which scrambles every minute or so too.
Viewing post in Update from Itch on the ongoing situation comments
The problem is there's no way to do that. Once you give that info to Itch, or Discord, or X, it's impossible for them to prove they've shredded it, so you have to assume they haven't.
In the case of Itch it's admittedly a little goofy too because if you're buying stuff here, you're ALREADY deanonymized: you have to give your card details, including your name, and those can, at some point, be connected with address, phone number etc. But that's a theoretical correlation of a bunch of data from different sources, necessitating either dual, simultaneous hacks of different companies (itch and Visa) or a warrant. That's a bit different than just having a photo of your ENTIRE DRIVERS LICENSE just sitting on a hard drive somewhere, waiting to be stolen or abused.
But also, this misses the point. This very obviously isn't about protecting children. We're talking about politicians, a group of people notorious for doing you-know-what on a regular basis. The entire point of the like 5 different programs that are in various stages right now is to normalize showing your papers on everything you do. When you shop, when you watch youtube, when you travel, when you do business, when you game online (can't have kids gaming more than x hours a day!) etc. Not in the modest way we already do, but overtly and completely, in one universal system. The political class doesn't like the fact that some of their old tools of control, like the media, are starting to become outdated, so they're implementing new ones, and this is at the head of the pack.
There's no point trying to engineer the privacy violation out of the product, because even if it was possible, the privacy violation IS the product. "Protecting children" is just the marketing campaign.