One does not simply "implement NIP-42". Clients must decide to auth or not auth depending on the context.

Clients should not just authenticate with any relay that requests auth from them for reading public notes, for example.

They should authenticate in order to read DMs, for example, or other special-purpose activities and relays.