Nobody Changes the Default

Published: September 2, 2026 • 📧 Newsletter

The largest child-safety settlement in tech history landed last week, and the people who won it are the ones calling it a loss. One plaintiff-side litigator put it flatly: the states “took the check instead.”

Almost everyone reached for the same comparison, labeling this Big Tech’s Big Tobacco moment, with the reckoning finally arriving the way it did for cigarette companies in the 1990s. I don’t buy it. Meta’s stock barely moved, and the defaults that actually keep kids scrolling barely changed.

Below, I unpack what Meta actually agreed to, the clever way it wired the deal to bind its rivals, and why the real precedent isn’t the 1990s at all. But the question beneath it all is the one worth sitting with. What does this mean for youth, their privacy, and their mental health?

As always, your support is valued. Reach out anytime at hello@wiobyrne.com, and subscribe if you haven’t already.

The Settlement

On August 26, Meta agreed to pay up to roughly $18 billion to end a trial in Oakland, settling claims that it built Facebook and Instagram to hook kids and then lied about it.

The lawsuit alleged that the social media giant knowingly designed platforms to addict children, despite knowing about the harms the platforms could pose to young users. The states also claimed that Meta knowingly collected data from children without parental knowledge, which violated the Children’s Online Privacy Protection Act (COPPA).

In the settlement, Meta made no admission of guilt. Of the $18 billion settlement, about $12.7 billion is committed to the states outright, with the rest contingent (we’ll get to this in the next section). Meta will take a $10 billion legal charge this quarter. For a company of Meta’s size, $18 billion is a few weeks of revenue. Its stock barely moved.

The terms of the settlement also inform their practices for a decade. A default two-hour daily cap across both apps that only a parent can lift, a midnight-to-6 am block, muted notifications during school hours, hidden like counts, no cosmetic-surgery filters, and an independent auditor. These changes target the product’s architecture and default settings, which matter more than optional tools that users have to find and enable themselves.

It’s important to note that the independent audit covers just five years of a ten-year deal, and the enforcement details remain unclear. Technology governance increasingly fails not at the level of rules but at the level of enforcement. It remains to be seen whether independent oversight will have real authority and access over the coming decade. With Meta, I’d suggest the answer is no.

The Contingency Plan

Roughly 30% of the money, about $5.3 billion, is released only if TikTok and YouTube adopt matching protections and pay a matching sum themselves. Meta suggested an industry-wide solution was necessary as teens move fluidly across dozens of apps and platforms.

Let that sink in. The company being punished got to write the rulebook, and gets a discount if its competitors refuse to sign it. Zuckerberg made it explicit by publishing an open letter to TikTok and YouTube asking them to fall in line. The states didn’t just fine Meta. They let Meta set the standard for an industry Meta doesn’t control, and wired the penalty so that Meta’s rivals either match Meta’s terms or make Meta cheaper.

Here’s why that matters beyond Meta. Once these terms exist, they become the reference standard everyone else gets measured against, and this settlement is built to spread them. Because Meta “agreed,” there’s no law to challenge, yet the terms bind it for a decade and pressure the whole industry to follow. So if a smaller platform designs child safety differently (like Snap or Roblox), even in a way that works better, it’s now the one deviating from what the Attorneys General have blessed. That deviation is easy to frame as choosing to keep kids unsafe, which is a lawsuit waiting to happen. The safe move becomes copying Meta, and doing something new becomes too risky to try.

The Default

With all of the headlines about this story, here’s what I’m focused on. Does this protect kids?

This settlement comes as “protect the kids” is a rallying cry, and as various versions of digital IDs or age verification spread globally. This wave of age-gating is accompanied by calls for stronger child safety measures online, while still having serious concerns about privacy, security, and censorship. It seems like this Meta settlement bakes age assurance into all products.

To enforce a teen time limit, a platform has to know who’s a teen. This means verifying age for everyone, adults included. Age verification can’t be done without identity verification. Every age-gate is an ID checkpoint. Picture an internet where every website and app asks for your papers first. No reading an article, watching a video, or joining a conversation without first proving who you are. Every click logged, every interest tied back to a verified name. Anonymity is structurally impossible as everything you read or say is permanently attached to your legal identity.

In addition, these changes do nothing to stop the features that actually keep kids scrolling. The autoplay and personalized algorithm that serves you content are not turned off. You can turn them off, but you have to go find them yourself, buried in settings. And infinite scroll, the bottomless feed that’s the whole engine of the thing, doesn’t even have an off switch.

Why this matters: Some of the changes will benefit teens, like the two-hour daily limit, a block from midnight to 6 a.m., muted notifications during school hours, and hidden like counts. But most of the stuff that's profitable for Meta is opt-in. Meta, like most tech companies, knows that almost nobody ever changes a default.

The Understory

In the early 1950s, comic books were the target of a national panic. A psychiatrist named Fredric Wertham published Seduction of the Innocent, arguing that crime and horror comics were breeding a generation of juvenile delinquents. The claim caught fire. The Senate held televised hearings on whether comics were corrupting the young, and an industry that had spent a decade as cheap, disreputable, wildly popular children’s entertainment suddenly found itself on trial.

The publishers didn’t wait to be regulated, as they regulated themselves. The major houses formed the Comics Code Authority and began printing a seal of approval on every book that met the code. Nothing about it carried the force of law, and it didn’t need to. The power was in the distribution. EC Comics, which published the horror and crime titles that had drawn the most fire, was pushed out of the business entirely and survived only by walking away from comics for a magazine called Mad. Deviating from the standard wasn’t a risk; for some, it was an exit.

In our current content, it feels like Meta didn’t get punished so much as handed a pen. The terms it agreed to are now the standard, and any platform that builds child safety differently is out of step.

And my question about protecting the kids is really missing the point. The Comics Code didn’t make comics safer. It made them quieter, narrower, and easier for the biggest publishers to control, all under a banner claiming to protect the young. Seventy years later, the banner reads the same. The two-hour limits and midnight blackouts are real, and some will help. But the engine underneath (the infinite scroll, the algorithm, the defaults almost no one ever changes) is still running. It was always the defaults that mattered.

We learned once that a “protect the kids” panic can hand an industry the power to write its own rules and call differences dangerous. We’re about to learn it again.

See you next Wednesday. As always, my email is hello@wiobyrne.com.


Previous: DL 445Next: DL 447Archive: 📧 Newsletter


🕸️ Connected Concepts: