Hello,
If You are using forwarding instances, interfaces can be in same zone because interfaces are not assigned to forwarding instances, they are "copied" there.
The above won't be the case If You choose to play with virtual routers instead of forwarding instances.
HTH
thx
Alex