The get() method for the base client service does not enforce that the ID is defined.
See:

The update() method enforces this as you would expect.
See:

Without enforcing that the get() method has an ID, it just returns a random record;

const user = await app.service('users').get();
// user is defined because it basically did a find();