Google Fonts is convenient and still, for most sites, the wrong default. We moved every site we run off it this quarter.
What self-hosting buys you
A smaller CSP, an honest privacy policy, and a measurable bump in LCP on slow networks. The only cost is fifteen minutes and a woff2 subset.
- preload two weights, nothing more
- font-display: swap, always
- Subset to the glyphs you actually render
Nothing here is new. It's just a habit worth forming before the next audit lands on your desk.