We built it first on PHP and later Node.js. It was clear from the start we had no idea what we were doing.

Online ID should only be legally mandated in cases where KYC (know your customer) laws exist, like financial services.

If you want to protect children, make them use devices that are locked down and block adult content. Online service providers should at most be required to mark such content with metadata.