Steps to reproduce the issue

Joomla4: open "edit templates styles" (in Administration).
Select "Cassiopeia"
switch to "Advanced" tab
click on "Fonts scheme"

Expected result

Selectable options should be GDPR compliant

Actual result

without warning, it is possible to select "Fonts from web" (which results in loading the fonts from Google Fonts API).
This creates a GDPR violation (currently only in Germany, but Austria and other countries might follow soon), and the website owner is not even informed about this.

System information (as much as possible)

Joomla 4.2

Additional comments

Either remove the "Fonts from web" option, or replace it with a GDPR compliant solution (e.g. host the fonts on a Joomla server located within the EU).
It could also be a solution to warn the user about a possible GDPR violation, and leave the decision to him.