+1 for SimpleLogin. Not affiliated, just been using it for a few years now and it’s been rock solid and a complete game changer.

As an example someone tried a banking scam on me, and I asked them to read back the email address associated with my “bank account”, and they instead read back the alias I’d used on some other random website I’d put my credit card number into 6 months prior. This proved what website leaked my credit card, but also they were trying scam me (as if the request for a 2fa code wasn’t proof enough)

Age shouldn’t be a factor, perhaps make it a requirement to agree to a new EU branded passport instead?

UK here, also got the email.

Worth giving SimpleLogin.io a look. It has customizable display options for this. (not affiliated, just enjoy using it)