If we want to change the font on Kagi with custom css, we can only change it to the fonts we have installed on our machines, but this is harder on mobile. CSP (content security policy) prevents us from using custom web fonts.
DuckDuckGo for example has a list of predefined fonts, but afaik they don't have custom CSS. Kagi has no list of predefined fonts, but we could change those to a different font with a custom CSS, if we had the ability to link it to a different font on the web.
Add the ability to whitelist specific domains from which the fonts/CSS could be included, perhaps in settings > appearance, close to the custom CSS. Could be one exception per line.
There should however be a warning next to the input, if there are security/privacy risks, for example if including fonts from Google Fonts poses a user tracking risk.
Personally, I would store my fonts on my own server and link to that, so there would be no tracking issues.
I've seen this discussed a few times on Discord, and with the recent CSS overhaul, thought it would be a good time to add it.