A German court has ruled the use of Google Fonts violates the GDPR privacy act.
Under GDPR, websites need explicit permission to share personal details with 3rd parties (such as an IP address).
Loading Google fonts without explicit permission from your user makes you vulnerable to a fine.
50M websites use Google Fonts.