I’ve worked in high-trust environments (read: where public CDNs are noncompliant) and that’s never been an issue. All of these fonts are downloadable and self-hostable.