Are there any security relevant international domain names, which require punycode? That's the real security problem: dont use IDNA 2003 for anything security r

Are there any security relevant international domain names, which require punycode? That's the real security problem: dont use IDNA 2003 for anything security relevant. redirect to an ASCII domain.