Marek Vavruša authored Apr 04, 2018 and Petr Špaček committed Apr 12, 2018

The root DS exists outside of DNS hierarchy, so its NSEC proving non-existence
always contains the SOA, as that's the root of DNS and there's nothing above it.