Please confirm operation and security

I currently have a client who uses a Google Sheet to update a table on their website using the WP plugin Wpdatatable.
This works perfectly, but they would like to use Microsoft Excel Sheet instead. Before we go ahead and change, please can you confirm all the following:

OPERATION:
WP Table manager operates in a similar manner to the above. The Excel file lives in the client’s Microsoft 365/OneDrive account. When they update it, the website table updates automatically.

This is my understanding:

Step-by-Step: What Needs to Happen

Step 1 — Purchase WP Table Manager
One-time plugin cost: $49 USD (unlimited sites, 1 year support and updates, no recurring fee). This is from JoomUnited and is the only WordPress table plugin with confirmed, built-in Office 365/OneDrive live sync.

Step 2 — Confirm the Excel file is in OneDrive/SharePoint
The file must live in their Microsoft 365 OneDrive (not a local computer). If it's already auto-saving to OneDrive as part of their internal workflow, it's already there.

Step 3 — Set the file sharing to allow read access via link
In OneDrive, generate a shareable link for the specific Excel file — set to "anyone with the link can view" (read-only). This is what the plugin uses to pull data. No login required for the website to read it.

Step 4 — Install and configure WP Table Manager on the WordPress site
Install the plugin, create a new table, and use the Import & Sync > OneDrive Excel option. Paste the OneDrive share link, fetch the data, and enable automatic synchronisation.

Step 5 — Style the table and replace the existing wpDataTables shortcode
The existing table on the Resources page will need to be recreated in WP Table Manager, styled to match, and the shortcode on the page swapped out.

Step 6 — Test and verify
Update a number in the Excel file and confirm it flows through to the website within the sync interval (typically a few minutes).

SECURITY:
There are no security issues with having a sheet connected to our subscription directly feeding the website? The Excel file is saved on the company’s group OneDrive (i.e. not on a local computer nor an individual's OneDrive).

This is my understanding:

The file is shared via a read-only link — the website can only pull data, never write to or alter the spreadsheet. The link gives access to that one file only, not the broader Microsoft 365 account. No credentials or tokens are stored in WordPress. This is actually more secure than a full OAuth connection, because there are no account credentials involved at all — just a public read link to a single file.

The only thing to be mindful of: make sure that spreadsheet contains only the data intended for the public website. If there are extra tabs or internal notes in the same file, those should be moved to a separate file.