We need to think things through and take security seriously, before we cause more serious problems. We have all seen semi-broken characters and weird symbols ap

We need to think things through and take security seriously, before we cause more serious problems. We have all seen semi-broken characters and weird symbols appearing in text (due to fonts, codepages, encodings, or plain bad handling of unicode strings) for decades now, and have mostly shrugged it off, accepting that maybe someone else is seeing more appropriate text thanks to that. But security is not the place for such cavalier attitudes. I'll gladly give up my Ñ's and É's and Ç's in domains and other global identification services, in exchange for knowing that It Will Just Work, always, everywhere, safely. And once the "very smart people that really figure things out" have a solution that works with more extensive cultural/linguistic features, by all means put it in place.