They are going to share the file one way or another, if you put all your eggs in one basket it's only going to cause them headaches to have to move it. Adding that step isn't really going to keep them from it.
If you can define what sensitive data is you can always put DLP policies out there to prevent sharing documents with that data matches in them.
But anyway, you cannot prevent sharing from a folder, it is site collection level only.
