I feel the immense possibility of security vulnerabilities from this, but I assume it’s just a font, so, I suppose anything that looks like scripting can’t acce

I feel the immense possibility of security vulnerabilities from this, but I assume it’s just a font, so, I suppose anything that looks like scripting can’t access any outer API.