I'm aware this topic has been covered over time.. but it appears some API's been added that possibly give some added functionality. Hopefully some option now exists.
Azure AD security is mandatory also.
If you use the SAAS Power BI service you end up w/ a non secured report embedded using an iframe. (refresh availablet though).
If you use the Embedded upload to Azure approach (which I can still use per EA) for embedding, cannot refresh data. All you can do is delete the pbix and upload a new from desktop.
Is there now any ability to refresh? Keeping in mind that report cannot be 100% public to the world.