@JulianOliver It's a good practice to keep everything from googleapis domain blocked with uBO and only allow when absolutely necessary. But it's even better to block fonts.googleapis.com at resolver level because the one using it is definitely going to show you something really ugly. Like Droid Sans 😄