As nostr survives and grows, I think NIP-42 will become a requirement. At least, it will be for DM access.

Of course, DM’s came before AUTH, but now that both are solidified, it’s kinda crazy that the default configuration for relays is to share all DM metadata openly for all to see.