True, we have seen this issue with fraudulent domain names, where they can pose a security issue. To me it seems normalisation at least reduces the attack sur

True, we have seen this issue with fraudulent domain names, where they can pose a security issue. To me it seems normalisation at least reduces the attack surface, while not solving the issue completely. I am not qualified to judge whether or not the complexity increase is worth it. But what are the downsides - what is so bad about NFC?