It only works as a decoy when you give it to the LLM as an image. As html it appears like normal human friendly text, which is what screen readers use to interpret the text.

Which means that this font is entirely useless unless it is implemented in a way that breaks screen readers.