"Crucially, they all bypass the key security measures deployed by Chromium-based browsers."
This has been a Chrome problem for at least ten years. Firefox users, just set network.IDN_show_punycode to true in about:config.
www.theregister.com/security/202...
theregister.com
Two characters open up a world of typosquatting opportunities in Chromium browsers
Attackers abusing rare Cyrillic and Latin letters to impersonate popular websites