I’ve never had to sign an NDA and my whole career is in academia, and a lot of it with funding and partners from industry. The only colleagues I know (some of them working on nuclear materials, so quite sensitive) who are in this kind of situation is because of security clearance, and universities have nothing to do with it.
It’s definitely not normal, and should actually raise some red flags. I would like to know which institution does this sort of things.