You’re right that a self-entered birthdate can’t really verify anything, since anyone can type any date. Proper age assurance requires checking an identity document, so the reliable route is integrating a third-party identity verification service into your registration flow rather than a simple checkbox or date field. I’d also check the regulations that apply to your audience first, since the required level of verification varies by region.
