It does however require that OS providers “Send only the minimum amount of information necessary to comply with this title and shall not share the digital signal information with a third party for a purpose not required by this title.” (emphasis mine)

I wonder how much this is news outlets overreacting to a proposed bill that is not actually that bad

What do you mean, that’s horrible on its own. None of this information should be necessary to run a computer. The computer shouldn’t have to process this locally, let alone be mandated to upload it to someone’s server.

Age verification is identity collection.