If you want to use Cloudflare as your Major DNS service provider and take care of your DNS information on Cloudflare, your domain needs to be employing a full setup. Google Have faith in Services isn't going to support punycode domains as pointed out while in the certificate authorities https://artybookmarks.com/story17019146/indicators-on-setup-dmarc-google-workspace-you-should-know