As indicates by a friendly stranger, overlong UTF-8 sequences should produce an error. However they are currently being accepted as valid.