sure, iirc it used to even just be a setting? online-mode=false
most servers leave it enabled because preventing player impersonation is pretty important so people can't just easily grief each other. some piracy servers implemented their own auth on top.