Is it normal practice to initialize the session on the first visit to the site page?

Question

Laravel

We decided to partially migrate the legacy project to laravel, and in the process I came across the fact that laravel always initializes the session to store validation errors, etc. Even for an unauthorized user. So the question is, how common is this for web applications that run in sessions? Do other frameworks handle sessions similarly?

Answer 1

Well, if one of the world's most popular frameworks does this out of the box, do you think it's generally accepted?
In most cases, this is not a problem.
There are rare exceptions when sessions are not needed, then you can disable them.
Even rarer cases are when sessions lie on the disk and work for all visitors - then with a (very) large number of visitors, there may be problems with the disk, or rather the brakes of the disk.