To add more context: I'm aware this is not the best way handle this (should rather use ensure_csrf_token), but because the view is served via Wagtail, I could not find a way to use that decorator.

Is there a reason to have {% csrf_token %} conditional?

In D7844#189512, @Sybren A. Stüvel (sybren) wrote:

Is there a reason to have {% csrf_token %} conditional?

As far as I could see, this code is really needed only if the user is not authenticated.
If the user is authenticated, a valid token is usually available in the session.