I'm wondering about commercial CDNs for font serving such as by Adobe and Monotype. Last I checked, these require hosting on their properties, or alternatively pinging their counter so that they can enforce their volume licensing. Only last year, there were still type foundries left that would license on a trust base; but these have gone away/bought by Monotype such as URW+ who once created free fonts for F/OSS operating systems (in my home town even). But isn't the practice of pinging or pulling from a third-party domain before presenting a consent dialog a GDPR violation?