That depends on what's in the report. 5 MB could mean 100.000 cells of data, which no one can reasonably check, not on a mobile device, and not elsewhere. It could also mean 10 cells and a hi-res images.
But you can easily test
that yourself - have a user (not a developer) download the file to a typical device you would use, and have him carry out whatever the confirmation process entails.