I'm mostly okay with the law covering this specific situation, but the law could reasonably be amended to allow for an easy way for parents to give consent - instead of companies just denying access based on an arbitrary age.

If they can require my bank to double up on the login confirmations, they can require services to provide a reasonable way to let parents give their consent.