I don't know the history well enough to make written claims, but here are some observations from a modern viewpoint.
We speak of curves and surfaces as sets, but our analytic tools in differential geometry usually rely on mappings. We're then obliged to show our definitions do not depend on the mapping. In order to calculate anything, we're generally obliged to pick a mapping of some sort. Even to describe many geometric objects, we're obliged to refer to mappings.
To use surfaces as an example, if $U$ is a non-empty open set in the Euclidean plane and $x$ is a smooth, injective mapping to Euclidean three-space whose differential $Dx$ has rank two at each point of $U$, and if the inverse $x^{-1}:x(U) \to U$ is continuous, then $x$ is a parametrization and the set $x(U)$ is a smooth surface patch.
We can now define a subset $S$ of Euclidean three-space to be a smooth surface if for each point $p$ of $S$, there exists an open set $V$ in Euclidean three-space and a surface patch whose image is $x(U) = S \cap V$. It's a theorem that if $S$ is a smooth surface and $p$ is a point of $S$, there exist precisely two unit vectors at $p$ normal to $S$.
We have other ways to identify subsets as smooth surfaces. Particularly, the implicit function theorem guarantees that if $F$ is a smooth, real-valued function on some non-empty open subset of Euclidean three-space, if $S = F^{*}(\{c\})$ is a level set of $F$, and if $DF(p)$ is not zero at each point $p$ of $S$, then $S$ is a smooth surface. The normal vectors at $p$ turn out to be the two unit vectors proportional to the gradient of $F$ at $p$.
From either perspective, incidentally, it's straightforward to check that the graph of a smooth, real-valued function in $U$ is a surface, and to calculate its normal vector at an arbitrary point. But note carefully that derivatives can be visually-surprising. Suppose $S$ looks like the $(x, y)$-plane, and suppose $P$ is an arbitrary plane through the origin. Mathematically, $S$ might have a microscopic bump making $P$ tangent to $S$! On closer inspection (as it were), we can't generally define, much less find, tangent planes of smooth surfaces geometrically, which means we can't find normal vectors geometrically either. (By contrast, we can define tangent planes geometrically for geometrically-defined surfaces such as planes, cylinders, and spheres.)
This is a lot of technical fine print and conceptual baggage to chew when one first encounters surfaces! Small wonder that instructors and authors often wave our hands and refer to soap films or membranes or similar physical metaphors, and assume students and readers have a naive geometric idea what is a normal vector.