> Does every minecraft client have to authenticate with a central server before joining a private one?
yes - login is required by the user iirc. You need a microsoft account to play minecraft (and i believe they recently migrated all old mojang accounts to microsoft now?)