at least java minecraft does that part right with the offline mode that switches off auth checks. for a real online server you need a login plugin then (makes sense that some form of username ownership verify is needed in that case) but for a secured LAN it is usable by default.