Then those parents can turn off their browser/client’s age protections. I think that’s actually a decent argument for the solution posed by this thread.

There is such a thing as making the "kid ok" header so rare or "18+" so eager that nobody takes it seriously, so that'd need to be kept in mind.