On point 2: indeed, given that they are restricting themselves to bash, I would have expected a note of `set -eu -o pipefail`, at least. `-x` (tracing), isn't appropriate for many scripts, though.
On point 3: `: ${FOO:-some default value}` is the typical pattern for ensuring a default value is set.