When I used it it seemed like it was mostly real names (.edu accounts) at least on the groups I read, so maybe that kept people in check a bit. Though that would have been easy to spoof I'm sure.
My department also had some local groups that did not propagate. So it must be possible to stand up your own NNTP server and have groups for your local users that are at least in that sense "private"