Indeed, the issue with Google Fonts (and Google Analytics) is how they track users. You need explicit consent for your visitors.

In reality, I'd suggest you avoid both services and go for simpler choices. E.g.: fontsource.org for fonts, and maybe something like plausible if you really need analytics.