They could publish their IP addresses so that the traffic can be blackholed at the router by the account holder.
The choice would then be down to the person paying the bill whether to block or not.
It won't apply to shady sites, but those sites won't do age verification anyway.
The problem is nobody wants the account holder to have the power.