When you use the @font-face protocol, the client essentially downloads the font from the server. Where is this file stored on the client's computer? Is it stored on the physical drive or just in memory? How easy is it for the client to obtain the file?
Where is this file stored on the client's computer?
Wherever the browser wants (including, possibly, only in RAM).
How easy is it for the client to obtain the file?
Trivial. They can read the URL from the CSS file and download it manually if nothing else.