In Box Shield, add a Security Control setting that locks the folder and effectively puts the folder in a read-only mode, disallowing edits and uploads, no matter what the collaborators' permission levels are (except Admin, obviously).

This way, it's possible to give users a "lower" permission level to a subfolder without affecting their elevated permissions in the parent folder.