Here my inputs. You can share workbook with them and ask them to view using Tableau reader only.
You can also publish viz to Tab server or online and turn off workbook downloading.
In addtion to this you can also assign DB password.
Can you elaborate on assigning DB password. This sounds interesting