You think you own your computer. You think the operating system running on your machine answers to you. The state of Illinois just disagreed.
A bill quietly moving through the Illinois legislature — the Age-Appropriate Design Code Act — doesn’t just ask apps to verify your age. It demands that your operating system itself report the age of every person using the device. Not the browser. Not the app. The OS. Windows. macOS. Android. iOS. And yes — Linux.
Let that sink in for a second. The software layer that sits between you and your hardware, the thing that literally makes your computer a computer, would be legally required to act as a government informant.
When the operating system becomes a surveillance tool, the computer stops being yours.
Here’s how we got here. For years, lawmakers have been trying to “protect children online.” App-level age checks. Browser warnings. Parental controls. None of it worked well enough, because kids are smarter than compliance forms. So Illinois decided to go nuclear: instead of asking the app, ask the device. Make the OS the gatekeeper. Make it impossible to use a computer without the machine first confirming who — and how old — you are.
It sounds reasonable if you don’t think about it. Children need protection. Who could argue with that? But the moment you start thinking, the whole thing collapses.
Because here’s the problem nobody in Springfield seems to have considered: Linux doesn’t have a central account system. There’s no “Linux Inc.” that can push an update to every machine. There’s no login screen that phones home to a corporate server. That’s not a bug — it’s the entire point. Linux was built so that no one owns your machine except you. No telemetry. No account. No age report. Just code, running locally, answering to nobody.
Under this bill, that design philosophy becomes a legal liability.
If the law requires every operating system to report user age, and Linux structurally cannot comply without being fundamentally redesigned, then Linux is — by definition — non-compliant. And non-compliant software under regulatory frameworks like this doesn’t just get a slap on the wrist. It gets banned. It gets fined. Its developers get threatened.
You can’t ban a baby from chewing steak by outlawing steak for everyone. But that’s exactly what this law does.
One commenter on the original coverage nailed it: “This is like saying you can’t eat a steak because a baby can’t chew it.” That’s not a joke. That’s the actual logic of this legislation. Because a child might use a computer, every computer must report who’s using it. Because a child might install Linux, Linux must either comply or disappear.
Think about what compliance actually looks like. For Windows, it’s easy — Microsoft already has your Microsoft account. For macOS, Apple already knows everything. For Android and iOS, your phone is already a tracking device you willingly carry everywhere. The big tech companies won’t even break a sweat. They’ll add a line of code, maybe a new permission dialog that nobody reads, and call it done.
But for Linux? For the operating system that powers most of the internet’s infrastructure, that runs on servers in every data center on Earth, that’s embedded in everything from your router to your smart TV to the International Space Station? There’s no “Linux account.” There’s no central authority to mandate an update. Every Linux distribution — Ubuntu, Fedora, Arch, Debian, Mint — would have to independently build age-reporting infrastructure into their systems. And even if they did, the open-source nature of Linux means anyone could simply remove that code. Which means the only way to truly enforce compliance is to ban the non-compliant versions entirely.
The law doesn’t just threaten Linux. It threatens the foundational principle that software should be free, open, and answerable to its user.
And here’s the twist that should make your blood run cold: this isn’t really about children. It never was.
Child safety is the trojan horse. It’s always the trojan horse. Every surveillance expansion in modern history has been wrapped in the language of protection. The Patriot Act was about stopping terrorism. The TSA was about stopping hijackers. And now, OS-level age verification is about protecting kids. The pattern is always the same: identify a threat everyone agrees is bad, then build a surveillance apparatus so broad that it captures everyone.
Once your operating system is reporting your age to comply with Illinois law, what stops it from reporting your location? Your browsing history? Your political affiliations? The infrastructure doesn’t change — only the data being collected changes. You build the pipeline once, and then you pour whatever you want through it.
Today they ask for your age. Tomorrow they’ll ask for your thoughts. The pipe is already built.
If you’re a developer, this should terrify you. If you’re a parent, this should anger you — because your government is using your child as a justification to put a tracking device on every computer in America. If you’re anyone who values the ability to compute privately, anonymously, without permission, this is a five-alarm fire.
Illinois is a test case. If it passes, California will follow. Then New York. Then the federal government. This is how it always works — one state proves the concept, and then it metastasizes. The time to kill this is now, before the precedent is set.
Because once your operating system reports to the government, you don’t own a computer anymore. You’re just borrowing it.
And the cost of borrowing is your freedom.
FAQ
Q: Can't Linux just add an age-check feature and comply?
A: Technically possible, philosophically destructive. Linux's core identity is that it answers to the user, not a central authority. Adding mandatory age-reporting would require a persistent account system, telemetry, and a centralized authority to enforce it — effectively killing what makes Linux Linux. And since it's open source, anyone could strip the code out, making true compliance impossible without banning non-compliant forks entirely.
Q: What does this mean for regular computer users?
A: If you use Windows or macOS, you probably won't notice — they already track you. But this sets a legal precedent that your operating system must report identity data to the government. Today it's age. Tomorrow it could be anything. The infrastructure, once built, doesn't get torn down.
Q: Isn't protecting children worth some privacy trade-offs?
A: This isn't a trade-off — it's a bait-and-switch. OS-level age verification doesn't meaningfully protect children better than app-level checks. What it does is normalize the idea that your device must identify you to the government before it functions. Child safety is the excuse; total surveillance is the architecture.