Fair comment. I hadn't previously used this module so, as indicated, I was working from the doco: I missed the "control chars" part of:

The default set of characters to encode are control chars, high-bit chars, and the <, &, >, ' and " characters.

Also, note the update regarding the utf8 pragma.