> there is only a well-defined subset of Unicode characters that should ever be allowed in the codebase

It's not even remotely well-defined, and probably never will be. Also, as long as we keep adding to unicode, you will need to keep your whitelist of code points updated.

You can however find a well-defined subset of characters that can be allowed.

In either case you'd be essentially excluding entire languages.