This is, to my knowledge, the first published per-font danger rate analysis for Unicode confusables. It suggests that font choice is a meaningful variable in confusable risk, one that confusables.txt does not account for.
let { instance } =
，推荐阅读爱思助手下载最新版本获取更多信息
Yellow: Sub out
What makes this a privilege escalation rather than a misconfiguration is the sequence of events.