Sure they can keep their financials private by requiring a signed NDA before distributing shares. But if they're asking for an NDA after granting shares then it's too late. What incentive would the shareholder have to sign away certain rights in order to gain access to financial records to which he is already entitled? In order for an agreement to be valid and legally enforceable it generally has to provide some specific benefit to both sides.