Hi,
Did you know that when you create a Sharing Link in a SharePoint document library it's bypassing all your permission on subfolders even they have separate and broken permission?
So it's easy send a link with to much permission!
Please check uservoice and vote for it:
https://sharepoint.uservoice.com/forums/329214-sites-and-collaboration/suggestions/38960821-created-...
Thanks