Behind a basic age check, researchers say Persona’s system runs extensive identity, watchlist, and adverse-media screening.