Donald Trump likes to tell his supporters that he’s a fighter, a fearless champion who always has their back. Such guarantees, however, apparently do not apply to people who worked for him when they’re threatened by foreign assassins. Former Chairman of the Joint Chiefs of Staff Mark Milley, former National Security Adviser John Bolton, former Secretary of State Mike Pompeo, and the former Pompeo aide Brian Hook have all been targeted by Trump for political retribution. They are also being targeted by the Iranians, but the regime in Tehran has marked them all for death.

The president may be spoiling for a fight with career bureaucrats and “woke” professors, but when it comes to Iranian assassins, he is willing to walk away from men who carried out his orders. Milley, Bolton, Pompeo, and Hook all served in Trump’s first administration—he appointed them to their posts—and they were part of the Trump national-security team when the United States killed Iranian General Qassem Soleimani in a strike in January 2020. In 2022, an Iranian national was arrested and charged with trying to arrange Bolton’s murder, and American intelligence believes that other officials—including Trump himself—have been targeted by Iran because of their involvement in killing Soleimani.

The Biden administration briefed the incoming Trump administration on these threats and on the security details it had authorized to protect Bolton and others. Last week, Trump removed the details protecting Bolton, Pompeo, and Hook; yesterday, Secretary of Defense Pete Hegseth removed the guards around Milley and announced that he would be investigating Milley for undermining the chain of command during Trump’s first term. Trump also revoked the security clearances held by all four men.

[From the November 2023 issue: The patriot]

The revocation of security clearances is petty, but it harms the administration more than it does any of these men. Retaining a clearance helps former federal employees find work in the consulting world, and it is typical to hold on to them after leaving government service. (I was offered the opportunity to keep mine when I left the Naval War College.) But at more senior levels, clearances allow people in government to get advice from former leaders. Some of these people could have been of significant help to Trump’s staff during a crisis, although Trump himself is unlikely to care about that possibility.

Removing the security details, however, could have deadly consequences. The Iranians seem determined to seek revenge for the killing of Soleimani, and sooner or later, they might succeed. (“The Iranians are not good but they’re very enthusiastic,” a former Pentagon official said in October. “And of course, they’ve only got to get lucky once.”) And the Iranians aren’t the only threat out there; the Russians have no compunctions about attacking people in their home country, often using gruesome methods.

Trump takes such threats very seriously where he is concerned. When Biden officials alerted Trump to the danger from Iran, Trump asked for more security from the U.S. government, and during his campaign, according to The New York Times, he even asked that military assets be assigned to protect him, something usually provided only to sitting presidents.

Lesser mortals, however, must fend for themselves: Trump and Hegseth not only took away the security details of these former policy makers but did so with significant publicity, almost as if to broadcast to America’s enemies that anyone who wanted to settle scores with these officials would get no trouble from the current White House. (Trump also canceled protection for 84-year-old Anthony Fauci, the former director of the National Institute of Allergy and Infectious Diseases, who has been the target of multiple threats from other Americans.) Trump despises critics such as Bolton and Milley, and it is unsurprising that he has no obvious issue subjecting them to physical danger. But even some Republicans —who should be used to this kind of vengefulness from the leader of their party—have been shocked, and are trying to get Trump to reverse course. They are particularly concerned about Pompeo and Hook, loyalists whose lives have been placed in jeopardy for sins that are known only to the president.

[Read: Trump can’t escape the laws of political gravity]

In another time, Americans would rally to protect their own from the agents of one of their most dedicated enemies. Today, most citizens seem either unaware or unperturbed that the president of the United States is exposing his own former staff to immense risks. Nevertheless, it should be said clearly and without equivocation: President Trump will bear direct responsibility for any harm that could come to these people from foreign actors.

This is far more than Trump’s usual pettiness. He has always considered the oath of federal service to be little more than an oath of loyalty to him, and he has always been willing to threaten his opponents. (In 2018, he apparently considered handing Michael McFaul, the former U.S. ambassador to Russia, over to Moscow, a move that provoked a level of outrage that seems quaint today.) Trump’s message in this second term is that friends and subordinates are literally disposable if they cross him: He will not only humiliate and fire them, but he will also subject them to actual physical danger.

This escalation of Trump’s vindictiveness should serve as a very personal warning to anyone willing to work for him in his second term. Senior officials at the Pentagon, the State Department, the CIA, the National Security Council, and other organizations are routinely asked to go head-to-head with representatives of some of the most dangerous nations on the planet, and to contribute to operations against those regimes. In the past, such officials could do so knowing that their own government would do everything it could to keep them—and their family—safe from foreign agents. As one of Bolton’s former deputies, Charles Kupperman, told the Times: “Trump’s national security team must provide guidance based on their assessment of what needs to be done to protect America without regard to their personal security.”

Good luck with that. No one who works in defense or national-security affairs can assume that, when Trump orders them to cross America’s many enemies in the world, he will protect them from foreign vengeance. Trump has now made clear that he will abandon people who have taken risks in the service of the United States—even those who were following his own orders—if they happen to displease him. (Or, in the case of Pompeo and Hook, for no apparent reason at all.) Hegseth, for his part, may have no real idea what he’s done, and may merely be courting favor from a boss who has elevated him far beyond his abilities. But Trump knows better; he is himself the survivor of an assassination attempt, and no level of security was enough when he thought the Iranians were gunning for him.

People still considering whether to serve Trump can have no illusions about what awaits them. True leaders take responsibility for their team. Trump is no such leader; he will, on a whim, place other Americans in danger and then, as he famously put it in his previous term, take no responsibility at all.

In the pre-internet era, turning 18 in America conferred a very specific, if furtive, privilege: the right to walk into a store and buy an adult magazine.

Technically, it still does, for those hypothetical teenagers who prefer to get their smut in print. For practical purposes, however, American children can access porn as soon as they can figure out how to navigate a web browser. That’s because, since the 1990s, America has had two sets of laws concerning underage access to pornography. In the physical world, the law generally requires young-looking customers to show ID proving they’re 18 before they can access adult materials. In the online world, the law has traditionally required, well, nothing. Under Supreme Court precedent established during the internet’s infancy, forcing websites to verify the age of their users is burdensome and ineffective, if not impossible, and thus incompatible with the First Amendment.

That arrangement finally appears to be crumbling. Last week, the Court heard oral arguments in a case concerning the legality of Texas’s age-verification law, one of many such laws passed since 2022. This time around, the justices seemed inclined to erase the distinction between accessing porn online and in person.“Explain to me why the barrier is different online than in a brick-and-mortar setting,” Justice Amy Coney Barrett requested of the lawyer representing the porn-industry plaintiffs. “Do you agree that, at least in theory, brick-and-mortar institutions shouldn’t be treated differently than online?” asked Justice Neil Gorsuch.

If the Court indeed allows Texas’s law to stand, it will mark a turning point in the trajectory of internet regulation. As more and more of our life has moved online, the two-track legal system has produced an untenable situation. And lawmakers are fed up with it. Roughly 130 million people today live in states that have a law like Texas’s, all enacted in the past three years.

[Elizabeth Bruenig: Pornography shouldn’t be so easy for kids to access]

Technology has come a long way since the Court first struck down age-verification requirements. Age verification services are now effective, easily used, and secure enough to be widely deployed. However the Court rules in this particular case, the era of the online pornography free-for-all seems to be coming to a close.

Before the internet, limiting children and teens’ access to porn was pretty simple. Businesses weren’t allowed to sell porn to kids, and to ensure that they didn’t, they were generally required to ask to see some ID.

The Communications Decency Act of 1996 was supposed to establish a similar regime for the commercial internet, which only a few years into existence was already beginning to hint at its potential to supercharge the distribution of adult material. The law made it a crime to “display in a manner available to a person under 18 years of age” any sexual content that would be “patently offensive as measured by contemporary community standards.”

The Supreme Court unanimously struck down this section of the law in the 1997 case Reno v. American Civil Liberties Union, concluding that it amounted to a “blanket restriction on speech.” The law’s biggest problem was its vague and overbroad definitions of prohibited material, but practical concerns about the difficulty of compliance also played a large role in the Supreme Court’s ruling. It repeated the lower court’s finding that “existing technology did not include any effective method for a sender to prevent minors from obtaining access to its communications on the Internet without also denying access to adults.” And in a concurring opinion, Justice Sandra Day O’Connor wrote, “Until gateway technology is available throughout cyberspace, and it is not in 1997, a speaker cannot be reasonably assured that the speech he displays will reach only adults because it is impossible to confine speech to an ‘adult zone.’”

After that defeat, Congress passed a new, narrower law designed to survive First Amendment scrutiny. The Child Online Protection Act of 1998 required websites to prevent minors from accessing “prurient” or pornographic material. That law, too, was struck down, in part because the Supreme Court opined that optional parental filters would solve the problem more effectively while restricting less speech. In the end, parental filters were never widely adopted, and within a few years, kids started getting their own devices, which were mostly out of parents’ reach.

The Supreme Court decisions, and the legislative inaction that followed them, bifurcated the rules around kids’ access to porn. In the physical world, their sins were tightly controlled—no strip clubs, no nudie mags, at least not without a fake ID. Online, they did as they pleased. According to a 2023 report, 73 percent of teens ages 13 to 17 have watched online porn. A young boy or girl can take out their smartphone, type a free porn site’s URL into their browser, and be met with an endless array of quickly loading high-definition videos of adults having sex, much of it rough. Seeing an R-rated movie at a theater would require infinitely more work.

The first crack in this regime emerged in 2022, when the Louisiana Republican state representative Laurie Schlegel first decided to act. Schlegel, a practicing sex-and-porn-addiction counselor, had been inspired to act after hearing the pop star Billie Eilish describe how porn had affected her as a child. “I started watching porn when I was, like, 11,” Eilish said on The Howard Stern Show. “I think it really destroyed my brain, and I feel incredibly devastated that I was exposed to so much porn.”

[Read: The age of AI child abuse is here]

Schlegel was also inspired by the new technology available for online identity and age verification. In 2018, Louisiana had implemented a digital-ID-card app, called LA Wallet, that state residents could use instead of a physical ID. Schlegel realized that the same system could be used to share a user’s “coarse” age—whether they are older or younger than 18, and nothing else—with a porn company. The “gateway technology” that O’Connor noted didn’t exist in 1997 was now a reality.

Schlegel’s bill, which passed the State House 96–1 and the State Senate 34–0, required businesses that publish or distribute online porn to verify that their users are at least 18, using either a digital ID or another reasonable method. The law initially flew under the national media’s radar. (“I think there were only two [journalists] that called me in 2022 asking about the law,” Schlegel told me.) But legislators in other states took notice, and by 2024, 18 more states had passed similar legislation. In states without a digital identification program like Louisiana’s, porn sites must pay third-party age-verification providers to use software to compare a user’s face with their ID photo, held up to the camera, or to use AI to determine if their face looks obviously older than 18. According to a report from the National Institute of Standards and Technology, the average margin of error for these commercial face-estimation services is about three years, meaning that those older than 21 are unlikely to ever need to show ID. In practice, this is much the same as a porn shop back in the day: Most people get through with a quick glance at their face, but people who look particularly young have to show ID.

These state laws have some weaknesses. They apply only where at least one-third of “total material on a website” is pornographic. (At oral arguments, discussion of this fact prompted Justice Samuel Alito to quip, referring to porn sites, “Is it like the old Playboy magazine? You have essays on there by the modern-day equivalent of Gore Vidal and William F. Buckley Jr.?”) The law is also toothless against websites that are hosted abroad, including the Czech porn giant XVideos, which hasn’t complied at all with state age-verification rules, a fact that millions of teenagers in those states likely already know. Underage users can also evade the restrictions by employing virtual private networks to disguise their IP address.

Still, even prohibitions that can be circumvented tend to screen many people away from a given activity, as the country’s recent experience with sports gambling and marijuana suggests in reverse. Three of the biggest porn sites in America—xHamster (which contracts an age-verification provider called Yoti), Stripchat (which uses Yoti or VerifyMy, user’s choice), and Chaturbate (which uses Incode)—have chosen to comply with the state laws.

The big holdout is Pornhub, the most popular porn site in America and one of the most viewed sites on the internet, with billions of monthly visits. It has stopped operating in all but one age-verification state. (The exception: Louisiana, thanks to its digital-ID program.) In an emailed statement, the company said that the laws “have made the internet more dangerous for adults and children” by failing to “preserve user privacy” and nudging them toward “darker corners of the internet.” A Pornhub spokesperson who goes by Ian (he declined to provide his last name) told me that age-verification laws will lead children to seek out porn from even more troubling sources.

Joining Pornhub and other porn distributors in opposition are free-speech groups, including the American Civil Liberties Union and the Foundation for Individual Rights and Expression. They argue that the age-verification laws are “overinclusive,” because they would restrict young people’s access even to a hypothetical website that was one-third porn, two-thirds non-porn. At the same time, they point out, the laws are “underinclusive,” because, thanks to the one-third rule, they leave kids free to access porn on general-interest platforms such as Reddit and X, which have quite a bit of it. And, the free-speech groups say, device-based content filters are still a better, less restrictive way to achieve the desired result.

Much of the supposed burden on free speech centers on the notion that verifying one’s age requires surrendering a great deal of privacy. That fear is understandable, given the long history of internet-based companies violating their stated privacy commitments. But a company such as Yoti is not analogous to, say, a social-media company. It isn’t sucking up user data while offering a free product; its entire business model is performing age verification. Its survival depends on clients—not only porn sites but also alcohol, gambling, and age-specific messaging sites—trusting that it isn’t retaining or selling user data. Its privacy policy states that after it verifies your age with your ID, or estimates it with AI, it deletes any personal information it has received.

[From the May 2023 issue: The pornography paradox]

“From a data-protection perspective, all of our data, all the data we collect, is only used for the purpose it was collected for—i.e., to complete an age check—and it’s immediately deleted after the age check’s completed,” Andy Lulham, the COO of VerifyMy, told me. “This is standard across the industry.” (One company that appears to trust the industry’s assurances of privacy: Pornhub. Following a 2020 article by Nicholas Kristof in The New York Times that drew attention to the site’s hosting of rape videos, Pornhub began requiring online age and identity verification, conducted by Yoti, for every performer on the site. Ian, the Pornhub spokesperson, conceded to me that extending Yoti to its users would not raise privacy concerns.)

Recent estimates suggest that most kids have watched porn by age 12. Societally, America long ago agreed that this wasn’t acceptable. Now, finally, technology has caught up to the intuition that kids shouldn’t have unfettered access to porn just because it’s on the internet.

At oral arguments, the Supreme Court seemed inclined to allow Texas’s age-verification law to stand, although it might first send the case back to the Fifth Circuit Court of Appeals with instructions to subject it to a higher standard of scrutiny than it originally did. Either way, some form of age-gating is likely here to stay.

“Were we to lose in Free Speech Coalition v. Paxton, we’ve got some new legislation ready to go,” Iain Corby, the executive director of the Age Verification Providers Association, told me. “They’re fighting a rearguard action in the porn industry, but I don’t think they’re going to be able to fight for long.”