The challenge is complying with fast-moving age verification requirements that aren't necessarily aligned across the EU. (And as you know, legal obligations are a data processing legal basis.)
We can (and will) minimise further as we develop greater clarity on this.