How is that relevant here?

Caching was never mentioned as being a requirement. I'm only giving the most basic solution for achieving compliance with regards to hosting a font file.

Scope creeping, on a Sunday no less... where are we headed

I don't think they can right now anyway since the cache is segrgated by origin to prevent leaking cache timings.