very rose colored glasses. the extra work to identify such sites is trivial less than even the hashing approach anubis uses.

risks are minimal for data pipelining on the training side. you can bootstrap a classifier that errors towards reject to sweep 99% of the weirdness this thing is doing in a few days. we already have clean datasets we can use to baseline such systems.

on top of that its fairly easy to detect if a run is failing due to collapse. the capital costs are small.

pointless and easily worked around. these fonts would have a unique signature that can be detected and decoded same way the browser is doing it. basically its relying on obscurity to work.