Anonymous users are streaming from my library without guest access turned on

It’s a FreeNAS server. So chances are high, it was created using that horrible ‘Plex plugin’ for FreeNAS which disables all authentication per default.

@astralus find the Preferences.xml in the Plex jail on your server.
Shut down Plex Server
edit the Preferences.xml
seek for the keyword disableRemoteSecurity and either delete it or set its value to 0
save the file
start up Plex server

Go and warn everyone who uses FreeNAS and FreeBSD to not use that horrible ‘Plex Plugin’ anymore.
(this was not created by Plex Inc, btw.)