I can field this one, as I found out exactly why not when I bought my Condo some 7 years back. It’s in a building well over 100 years old, so there’s some strangeness to the whole building (but some very nice stained glass as well).
In my case, we have a limited ability to get into the ceiling to run wire drops, because, well, upstairs neighbor. No access to an attic or anything. I have a closet where the heater is located, where the patch panel is for those antiquated phone thingies, which is where AT&T UVerse comes in. From the patch panel, there is phone lines that run through the ceiling and from there…?
You see, the previous owner fancied himself a handy-man, and among other strange things that I’m still learning to this day, he walled up all the phone jacks. It turns out, it’s non-trivial to find them. I went as far as buying a live wire finder, and hooking the phone lines up to a 9volt battery, but there’s way too many live wires in the wall to reliably make a guess as to where the wires are. Maybe someday I’ll get brave and start knocking semi-random holes in the wall in hopes of finding those, and then I will run Ethernet.
Until then, I went with a handful of 200mbs Powerline ethernet dongles. They actually work quite well for streaming HD content off my NAS to various devices in the house. What’s great about the Powerline spec is that as long as all your devices are rated for the same bandwidth, it means they are of the same protocol revision, and will talk to each other. So, I have Rocketfish talking to Netgear talking to Belkin, no problems.
As far as link layer authentication, it seems like there is something in the Powerline Ethernet spec for it:
So it’s a matter of figuring out how to configure your devices. I haven’t bothered since I’m at a much larger risk of malware coming in from the internet than neighbors. Also, all my stuff requires authentication, so even if they hopped on my network, worst case, they would steal my internet.