The Children's Online Social Media Safety Act has device makers collect the age bracket, but apps still have to act on it.