Yes, there are two minimum requirements stated in the license:
- Prevent unlicensed third-party access, ie. hotlinking
- Disallow direct download of the webfonts (unrelated to the @font-face process of styling text)
There are multiple ways to achieve these requirements and implementation is up to you. If you prefer not to implement these requirements, we suggest using Typekit to host the fonts.