Hi Jonah,
Thanks for responding and taking a look at this. I see the same behavior as well with the stock plug-in. The behavior I was looking for, though, was to not only hide private events when a user is not authenticated, but to also show those private events when a user with the appropriate capability is authenticated (by default the plug-in sets the Administrator role to have that right).
On my site, I’ve also given that capability to Editor, Author, Contributor and Subscriber as well so that anyone who is logged in can see the private event.
Are you seeing private events display (like on the /events page and in the widgets) when you are logged in as an admin with the stock plug-in?
Thanks!