I think you're right, this looks like a bug. I'm on a snapshot from the past week or so, and prior to that it worked as expected. If I'm reading it right, setting nwid to an empty string would cause this behavior per
ifconfig(8), but having a _null_ nwid (by using join statements instead of nwid) should never cause it to connect to open APs.