Nextcloud knows two settings for passwords and public links: "enforce password" and "always ask for a password". Always ask is basically a suggestion, we ask the user to set a password but they are free to continue without a password.
"Enforce password" works nicely on Android, but not "Always ask for password".