Governments Banned the App. The VPN Tutorial Is Three Clicks Away.

Here is the cycle, if you've been paying attention long enough to recognize it: a technology causes visible harm, public pressure builds, legislators act, the act is mostly symbolic, and everyone moves on feeling like something was done. We are currently somewhere in the middle of that loop, and the countries involved seem convinced they're at the end.

Australia went first, rolling out a ban in late 2025 aimed at protecting young users from cyberbullying, addiction, and predatory behavior online. The UK followed, moving to ban social media for anyone under 16, with reports suggesting overnight curfews were on the table as well. Other countries are lining up. The legislation is real. The enforcement question is not.

The Law Is Not the Hard Part

The hard part is the VPN. Critics have already said it plainly — age bans can be beaten with a virtual private network, and the tutorial for that is three clicks from any search bar. When Ars Technica covered the UK's plans, the counterargument was right there in the coverage: push kids off mainstream platforms and you don't eliminate the behavior, you redirect it somewhere with fewer guardrails and no reporting infrastructure. The riskier alternative problem isn't a fringe concern. It's the most predictable outcome of any prohibition that lacks technical teeth.

And the technical teeth aren't there. Age verification at scale means one of two things: platforms checking ID documents, or platforms doing nothing meaningful and calling it compliance. Android Authority flagged what that first option actually costs — not just for teenagers trying to get around the rules, but for adults who don't want to hand their government-issued identification to a private company whose entire business model is attention harvesting. That's not paranoia. That's a reasonable transaction analysis.

So governments are essentially choosing between two bad options dressed up as one good one. Either the ban is enforced through data collection that creates its own civil liberties problem, or it isn't really enforced at all and exists mainly as political cover.

What's Actually Being Regulated Here

The stated goals — less cyberbullying, less addiction, less exposure to predators — are legitimate. Nobody credible is arguing those harms don't exist. The question is whether a geographic age ban touches any of them, or whether it just touches the platforms that are big enough to be regulated.

That distinction matters. The platforms most likely to comply are the ones with legal teams, public relations departments, and shareholder pressure. The platforms most likely to absorb the displaced traffic are the ones with none of those things. You don't have to be cynical to see how that plays out — you just have to have watched previous rounds of this.

What's interesting across the coverage is that everyone writing about these bans seems to know this. The TechCrunch piece situates Australia's move as the opening act of a global trend. Ars Technica surfaces the VPN problem immediately. Android Authority goes further, noting the discomfort this creates not just for minors but for anyone asked to sacrifice privacy in exchange for protection that may not materialize. The analysis is sound. The legislation proceeds anyway.

That gap — between what the coverage understands and what the policy does — is the actual story. Governments have decided that the optics of action outweigh the mechanics of effectiveness, and in this case, the optics are genuinely compelling. Protecting children from social media harm is not a hard thing to run on.

Enforcing it is a different matter entirely. And when the enforcement fails quietly, which it will, the harm will still be there — just routed around a law that was never really built to stop it.

The ban isn't the answer. It's the announcement that they've run out of better ones.