Let me clarify that a little bit.  Relays can be used for all kinds of things.  AUTH-to-read is perfectly fine in many contexts.

It is only the OUTBOX context that I'm talking about.

IMHO nobody should have an OUTBOX relay that is AUTH-to-read.