Intel Corp (INTC)

[simplytom]

This is only a problem with non-standard fonts, right? Could standard fonts be done in hardware and those requiring external code be done in software?

By default your browser is configured to download a font if it is not present in c:windows/fonts

So you have to intentionally change default behaviour.
I found this:
https://collinmbarrett.com/block-web-fonts/

but the guy is quite wrong:

While the risk and frequency of security vulnerabilities are relatively small with web fonts, there is still a precedent for concern.

I see a next security concern.
The mainboard manufacturer Intel made a small and nice change in the Firmware-updating-routine of the Intel S2600CW-mainboard.

You are only able to update S2600CW-UEFI-firmware if you know the firmware-password.
It is recommended to set an UEFI-Password.
Download this and look into the "Readme".
https://downloadcenter.intel.com/downloads/eula/26515/Intel-Server-Board-S2600CW-Firmware-Update-Package-for-EFI?httpDown=https%3A%2F%2Fdownloadmirror.intel.com%2F26515%2Feng%2FS2600CW_EFI_BIOS01010020_ME030103043_BMC014810351_FRUSDR113.zip

This is astonishing.