very hard to notice Phishing Scam - Firefox / Tor Browser URL not showing real Domain Name - Homograph attack (Punycode)

I don’t know if there is a fingerprinting risk.
It is up to The Tor Project:

Something similar, a first run popup existed for a while for the for the security slider:
add Tor Browser first startup popup to ask whether security slider should be set to safest
It was removed since it broke after a while.
This also makes all Tor Browser issues suddenly specific to Whonix, which is unmanageable.
For a stable implementation for that, someone would need to contribute and implement this:
[Feature Request] Environment Variable to set security slider level (#25391) · Issues · The Tor Project / Applications / Tor Browser · GitLab
Similar for punycode. Would be good if there was an environment variable in Tor Browser to enable/disable this. Otherwise no stable implementation is possible.