fonts.verifyIntegrity

SHA-256 verify downloaded bundled fonts. Downloads from the store are always verified. false is only needed when self-hosting _modified_ font files under the same ids via fontsBaseUrl; exact copies of the original files pass verification.