Font ligatures are the exact opposite of WYSIWYG [1] in the plain/text world.
I want to ensure that every character I see on the screen (at least in my code editor) is exactly what it is supposed to be, and maybe that way, I can avoid a good portion of character-based security issues like IDN homograph attacks [2] and bidirectional Unicode vulnerabilities [3]. Font ligatures can also conceal certain characters, such as the dot (.) used in domain names, making it easier for attackers to carry out phishing and domain spoofing attacks.
That is why I will never use font ligatures for anything serious.
The only scenarios where font ligatures make sense to me is in mathematical papers.
I want to ensure that every character I see on the screen (at least in my code editor) is exactly what it is supposed to be, and maybe that way, I can avoid a good portion of character-based security issues like IDN homograph attacks [2] and bidirectional Unicode vulnerabilities [3]. Font ligatures can also conceal certain characters, such as the dot (.) used in domain names, making it easier for attackers to carry out phishing and domain spoofing attacks.
That is why I will never use font ligatures for anything serious.
The only scenarios where font ligatures make sense to me is in mathematical papers.
[1] https://en.wikipedia.org/wiki/WYSIWYG
[2] https://en.wikipedia.org/wiki/IDN_homograph_attack
[3] https://github.blog/changelog/2021-10-31-warning-about-bidir...