Ya, self-hosted fonts would be best. It's super easy, just copy a font file over and point at that instead of the remote URL. I'm not sure why people would compromise their users' data by having them hit remote big-tech servers. What's the point of a fediverse built upon the bits of big tech, especially when there are simple alternatives?