I can confirm this behavior. The virtual robots.txt file is not generated until you have posts. This is independent of your privacy settings.
As a workaround, you can create a placeholder post that is privately published. Or, skip the virtual file altogether by creating a real robots.txt file.