Zero is a valid code point, and the UTF-8 encoding of it is a NUL (`\0`) byte. An 0xC0, 0x80 sequence in a UTF-8 is an invalid overlong encoding. In fact, the overlong encoding of NUL is used as an example of a security issue from an incorrect UTF-8 implementation in the RFC.