I don’t know why it’s including sensitive fields, my guess would be that the “Sensitive” toggle only applies to backoffice users.
You could create a custom template though:
This way you gain a lot more control over the rendering of values in your email responses.