Come to think of it, browsers could have a mode where they use only installed fonts regardless of what a site says. This would be useful to the people on slow connections.
Firefox supports this. In Firefox on Android, it's visible in the settings (under "data saving"). Not sure if it's surfaced in desktop, or only in about:config.