Domestic companies already are privacy disasters. The US can introduce privacy legislation like the EU if this is really an issue. But already porn is illegal for children under 18, so this is just a way to more effectively regulate with minimal externalities. Many people already pay for pornography which usually necessitates identification, so requiring ID for any porn site access is not a huge jump.