util: make _extend() more robust

Add a better 'is object?' check, the old one let values like true slip through.