Movie theaters, bars, corner stores, and strip clubs do not maintain a list of who they verify. They do not create a database for every customer, every time they visited, what product necessitated the check plus every other item purchased or merely browsed. They do not permanently link your identity to such information, keep it forever, and sell to advertisers or anyone else with the cash. IRL you flash an ID, check the date, and everyone moves on with their life.
The government still needs to provide the foundation, like verifiable drivers licenses, so a digital version done properly would still require a .gov framework that respects privacy. But that is not occurring in the states or other countries, all that is is being done is an ultimatum for the companies to "figure it out." I semi-trust Amazon Web Services to provide security for streaming apps on a Fire Stick, however I do not trust Samsung budget tier TVs running apps on wifi to be the same level. Yet now we have government mandates that everyone from reddit to simpcity needs a picture of our face and biographical information to verify 18+ and should be responsible for storing and securing such info like they are a bank?
Why bother with credit card skimmers, it will be far easier and more lucrative to target these companies now and the repercussions will be far worse than waiting for a new card in the mail.