Said this elsewhere, but it seems to me a bigger story that it also mandates age verification for 18 plus content, including porn and at the platform level.
Steam needs to verify your age now if it wants to carry porn games, or indeed any 18+ games.
~~And I do have problems with the loot box regulation, in that it doesn't qualify the boxes having to be paid, so technically Diablo II should be a 18+ game, along with every single RPG in existence. I have to assume courts or downstream definitions will do a sanity check on that, because the law they passed makes zero qualifiers, it just says "loot boxes".~~
So... maybe look into what they passed before being too celebratory about it?
They also mandate parental controls being present, which I do agree with and should have been enough. Of course that would not have changed anything, since they're already present in pretty much all current platforms.
EDIT: To clarify, someone questioned the unpaid loot boxes definition and on double check, they do define them as paid, so scratch that part. The age verification requirement is present, though.