Font renders are complex beasts with unsafe code. Since hardening code is hard, browsers use font sanitisers! https://github.com/khaledhosny/ots