Checking a privacy scanner's font complaint on a live TYPO3 site

A privacy scanner’s report, raised by a German manufacturer’s data protection officer, said its TYPO3 site used Google Fonts and that Cloudflare was still present. The agency couldn’t find those connections and asked me to check. The report was two weeks old, so I checked the live site: the font files came from the site’s own server with no request to Google Fonts, and the only outside request on the home page was Google Tag Manager. I sent the agency an analysis link and screenshots to answer the font complaint.