If private posts are included in “General Options > Post statuses to search”, the autocomplete feature uses the post titles of private posts even for searches by non-logged-in users. This might be something to improve on, since these titles should remain private and they also have no value for users without permission to read private posts.