best practice for a Power BI Workspace

HI all

Im trying to set up an environment where I can publish a dataset and allow others to use that data set to create reports. Ive set up a workspace, created and published a dataset and included certain users as "Contributors". Ive also promoted the dataset. 

What I have been doing is telling the user to go to the dataset and click on the Create report icon. Is that the correct way to use the workspace. 

Also now once a contributor creates a report and saves, now when they want to edit it the have the option to hit edit, and they also have the option to download the pbix file. This is where I see an issue. Once they download the pbix they now have access to the dataset and could in theory create another workspace and use that dataset for something else. Now Ive lost control over the dataset. Is there a way to let them edit their reports but not download the pbix.