There are so many "they may have missing glyphs", "free fonts may breach copyright", "there's no support" stories. And they amount to FUD from blog sites that don't talk openly about being on commission from commercial exchanges.
If you want great results on a website in particular, you could use a system font stack (which is often kinder on your users) or a common readable open font for body text, and then consider paying a brand designer with experience designing fonts to design a caption/headline typeface paired with it just for your own use. Or you could pair a system font with an existing font from an indie designer that does not use a font-serving CDN or have per-view licensing rules.
But there are high quality fonts in Google fonts that you can easily extract (the Create Block Theme plugin for Wordpress will now install Google fonts locally) and there are font-pairing tools that can help you make good decisions.
This is one of those things that has just moved on. There are so many ways to do this that don't involve stolen fonts.