Fonts become manageable through the interface in April, which moves a developer concern to somebody without the context to make it.
what the font library actually is:
a wp_font_family post type, and wp_font_face children
files uploaded into wp-content/uploads/fonts
a collection endpoint the installer reads from
a manage_options-gated screen
what it does not include:
any licence checking
any subsetting
any indication of the file size being added
we restricted the collection to a curated list and
left the upload path open to administrators only.An editor installing a font is choosing a licence and a payload size, and neither is presented. Restricting the collection to fonts already cleared for the site is four lines of a filter and it turns an open question into a menu — the alternative is a governance conversation with people who reasonably assumed the interface would not offer them something they could not use.