I assume that anyone trying to "filter" the text could just render it and then OCR it.

This works for ASCII, and you could just “smush” these special Unicode chars into ASCII lookalikes but then your AI won’t be usable by people who actually use these chars as part of their language.