this way we can avoid a try catch just to check is say ESAPI is installed getBuiltinFunction('encodeForHtml')

also, if you call isObject() the result, it returns false. yet the docs says Returns a built-in function as an object,

https://docs.lucee.org/reference/functions/getbuiltinfunction.html

calling len() or isEmpty throws, structCount works however

on invalid call of the function len, first Argument (object) is invalid, this type [lucee.runtime.type.BIF] is not supported for returning the len on line 5

this is a lucee only function according to cfdocs, maybe we could change the default behaviour for 6, returning a empty object?