This is just paranoia man. It's basically "they'll allow you to marry your dog next." All the law says is that an OS should require the admin to specify the age bracket of a user account, and offer an API to check the age bracket. It specifically says:
> This title does not require the collection of additional personal information from device owners or device users other than that which is necessary to comply with Section [The one about age brackets].
There are also separate privacy laws that forbid the collection and storing of personal data without consent. If I remember correctly, California is actually ahead of other US states in that regard, and have something similar to EU's GDPR.
The feature mandated by this law is not useless, because it makes the enabling of parental controls seamless and automatic. Most parents are tech illiterate and have no idea how to install anything on their router. Most people still call their router a "modem." When I do a quick web search on how to enable parental controls on MS Windows, I get some stupid complicated mess about some "Microsoft Family App" or whatever.
The whole idea is so simple, it's amazing that the tech industry didn't standardize something like this 20-30 years ago already on their own volition, without needing lawmakers to pressure them. Children and teens have been watching hardcore porn unrestricted for decades, and all the tech industry needed to do was implement the OS feature that this law asks for, and have websites send HTTP headers to indicate age restriction.
