With 1/3 of Internet users under 18, adult regulation struggles to protect the young while giving them authentic expression. In-built defaults and sophisticated assessments seek to mitigate risk but with no major shift.