The middle man in this scenario can mask the URL that is requesting age verification, but what's to stop the government compelling traffic logs from the middle man?

Nothing more than what prevents them from getting logs from your ISP about the sites you visit after verification. In ideal countries they need a court order for that, in less ideal ones they just scoop up the logs preemptively.