It's wild to me that just using Google Fonts (the hosted-by-Google way) immediately makes you in violation of GDPR.
https://termageddon.com/google-fonts-violates-gdpr/
You can always self-host though: https://gwfh.mranftl.com/fonts
Or it's a one-clicker on Cloudflare: https://developers.cloudflare.com/speed/optimization/content/fonts/