The reason there is no "isset" here is the function that grabs these from the request defaults to an empty string if none is found.  Also, in the line above it, an exception is thrown if the function is overridden and a `client_secret` is not returned in the array.  I agree though, that this should be changed