This is just moving personal data responsibilities from service providers (e.g. porn sites) to the central authority (QR code maker and verifier). Unless there is a semi-anonymous way of purchasing age proofs, e.g. over the counter.