Onebox Iframe/Cookies e.g. Vimeo (GDPR)

Sorry, but no. It isn’t that simple.

If a website makes the browser request resources from 3rd party, the IP is (for unavoidable reasons) transmitted to this 3rd party. And the operator of this website is made responsible for that data transfer. As the IP can be used to identify individuals, it is protected by GDPR.

That’s why websites make sure they host fonts on their own server instead of referencing them from Google Fonts. Just the first hit from Google: Google Fonts and GDPR: How to Stay Compliant? - CookieYes