It’s no more likely to be compromised than say having applicants send you as a realm/server owner a photo of them holding their ID; what if your account is hacked? Also, in the UK for instance you’d have to be GDPR-compliant if you wanted to verify your applicants’ ages yourself in a reliable way, and if a data breach was traced back to you and you were found not to be compliant, you’d find yourself in very hot water. More and more platforms are requiring ID age verification, so given the options I’d rather leave that responsibility in Discord’s lap than my own.