I agree, but in this case, we have already missed the start. If we introduce a whitelist now, after IDN deployment is already well underway, we are effectively punishing an unknown number of innocent early adopters, which seems like a betrayal. If we had forseen this problem, we could have set up the whitelist in the beginning, and registries & registrars would have known to get themselves added to the whitelist before making any promises to their customers.
PS. I fail to see what Registrars are to do with this?