Qubes OS protects from such attacks by running all software in isolated VMs and not passing the unicode symbols to the host by default, https://www.qubes-os.org/news/2024/07/13/qubes-os-4-2-2-has-...
>By default, qvm-copy and similar tools will use this less restrictive service (qubes.Filecopy +allow-all-names) whenever they detect any files that would be have been blocked by the more restrictive service
Also it looks like this is just for filenames? I can't imagine filtering text like this, that would render the system useless for me.
It gets a bit harder with transferring files between VMs as my original link shows, but you can be protected from that too at some cost.