It should probably supress the "reply" and "post" buttons/links if you don't have permission to do so (making a perm check would prepare us for the day when we *do* allow anon posts as an option)
Looks like a coding oversight to me ... forums was developed in the dotlrn context and you can't get into dotlrn without first logging in so OF probably never considered the not logged in case.
