In a nutshell: it'd be nice if the jelly script that generates the matrix ui element included a row for the 'authenticated' user group in addition to the anonymous user. (I'd even go so far as to advocate replacing 'anonymous' with 'authenticated' as the lone persistent row of the matrix, but that's a bit opinionated.)

My reasoning for this is simple: in my org many teams have jenkins projects that don't require strict authentication. Sometimes these teams would like to allow anyone in the organization to be able to configure a project, simply because the potential security impact of opening up the project's configs is so low compared to the inconvenience of having to maintain valid auth settings for it. To do this, most users simply give configure privleges to anonymous, because it's there and it gets the job done. Most of them don't realize that 'anonymous' includes non-logged in users, thus opening up their jobs to users who aren't even authenticated. 99% of them don't even know that the 'authenticated' user group exists, let alone that it's probably what they want to use here. I'm sure I'm not alone in this, and simply informing users that there even is an 'authenticated' user while simultaneously giving them an easy way to use it should hopefully eliminate this ignorance.

This is probably like a 3 line change in GlobalMatrixAuthorizationStrategy/config.jelly from what I can tell.