There is also a separate governance limitation. Proof of Age providers are expected to issue credentials only to applications included in a list of compliant apps maintained by the European Commission. This means that publishing the source code does not automatically guarantee that a community-built version can use the real service.

This incompatible with GPLv3? Because pivotization not allowed anymore and this sound similar concept.