Thx to GitHub issue comment.
Now, Typst doesn’t warn about tofus, let alone show proper glyphs.
So my suggestion is to document the issue:
Text
Parameters
font
…
Note: To set proper font set before any composing is recommended. Because for complex languages (e.g. CJKV), it’s hard to assert that the final glyphs are as expected.