If age tokens are truly anonymous, what's the solution for preventing a single person from generating and selling them to whatever child wants one?
Then make it illegal to sell them. Some people will still do it, but children can already order cannabis over the internet.
It's always a trade-off, it will never be perfect. But the status quo is not perfect either. The question is: is it better than the status quo? I think that age verification is not completely unreasonable (as long as it is made in a privacy-preserving manner). As a comparison, I think that ChatControl is completely unreasonable.