The direct use of $_SESSION seems to come from Drupal 7 code. Directly accessing PHP's $_SESSION should be avoided.
$_SESSION
Active
2.0
Code