> As a result UTF-8 that would decode outside that range is just invalid, no different from if it was 0xFF bytes or something.

That's needlessly pedantic. If you use an old version of the spec those bytes are valid.

And "have the capability" seems to me to be talking about what the underlying method is able to do, not the full set of "must not" rules.