We use the Universal login, and haven’t customized the page.
When inspecting the requests in the Chrome DevTools Network tab, I see a bunch for font variants that are not optimized, and don’t seem necessary at all:
Those fonts are used by Lock.js and the consent/mfa page for the Classic Universal Login experience. The New Experience does not use any additional font.