I was under the impression that it's legal to embed images of characters from fonts (i.e. I could scan and use a '&' set in Garamond from some print), it's just not legal to embed the 'program code' of the font.

Correct, but then when a user hits Cmd+Plus to scale your page up the fonts will scale nicely but your image-based ampersands will be blurry.