Loading fonts from Google Fonts for example is indeed considered not GDPR compliant without consent, because it reveals your visitors IP addresses. You can self hosts the fonts however and then it should be fine.