In case a module requires sensitive inputs (worst case passwords) then those shouldn't be added to the inputs2outputs.tf file.
It was also considered to set inputs2outputs overall with sensitive = true however this would also require the same setting for all outputs within this chain.
Therefore the proposal is to skip variables which have sensitive = true.
Easiest approach would be native support by terraform-docs.