While I imagine it's not a security measure, I don't think it's "just the way it worked" either. It sounds like a conscious decision to limit false positives.
You could /try/ to do it looking at the baseline and cap heights of the text itself, but you wouldn't know the scale in either direction. I imagine those font identifiers would have been a lot better if they could have known those things.