Currently setting password for shared links is not mandatory. We would like to have the ability to set a global control that requires all public/open ('people with the link') links to be password-protected.