For me and 300 million users avoiding malicious attempts at spoofing is important. Setting show punycode to true enables me to view pages in international domains in case I need to do this while preventing me from being exploited.
Its at present the best option for hundreds of millions of people.
Its not shortsighted or racist to acknowledge different populations of users have different needs.
Edit: In case people can't be bothered to read it should be obvious that I am advocating for shipping with show punycode true for the English US version of firefox.