In the current External Sharing functionality (released 9/27/2022), all documents sent to an outside recipients are encrypted (a) at-rest (in LexWorkplace system) and (b) in-transit (while being downloaded via SSL).

This new feature would give the sending user the ability to password protect the zip, as an extra, tertiary level of security for the downloaded/zip file itself (when stored on the recipient's local computer system).