From a legal standpoint, based on the article most of these developers are keeping the fonts in their assets (debatable if this is good or not).For public repositories, not to be malicious and be offer free fonts... How much trouble would they be in?

I Assume this is probably possible for FontAwesome premium icons as well ?

Having the server host the assets is probably the best solution (same rep) but if it's not in Git then it needs to be managed in the build for other open source developers. What's the Correct way of handling this situation?

> it needs to be managed in the build for other open source developers. What's the Correct way of handling this situation?

I would rather expect an open source project to use open-source fonts in the first place, not least because it makes this precise problem a non-issue.

So is using the font on a website.