There should be permissions by user to be able to download or export reports. Giving employees access to sales by invoice reports is important. Allowing every employee the access to download your entire customer list is a data Security Issue.

Currently, it is not possible to give employees access to sales by invoice reports and also prevent them from exporting your entire customer list.