Just buy the shit from the trusted party who manages that transactional history in a database developed with 60 year old technology

I think you just accidentally explained the advantage to NFT passes for this situation. You don’t have to trust them, because the clockchain ledger validates your pass, irrespective of whatever party is managing it.