same. saved my ass already a few times when doing some reverseengineering voodoo. being able to set a valid https cert makes it easier to redirect apps than to bypass forced HTTPS. had to pretend to be a update server for something once and patching the URL was enough via getting a cert quickly (using DNS-01 challenge, no exposed ports ever)
at least java minecraft does that part right with the offline mode that switches off auth checks. for a real online server you need a login plugin then (makes sense that some form of username ownership verify is needed in that case) but for a secured LAN it is usable by default.