Hi Swapnil,
Please take into account that receivers don't need to refresh the report in order to see the data. Because "one database fetch for all recipients" is used "WHOLE set of data" data is contained in the report from the very beginning. Personalization only applies appropriate filters on top of the report later on. Removing filter (applied during personalization.) will be enough in order to see everything. Because no refresh is needed, BW security will not work.
Another question arises: Assuming that non-enterprise user will get *.wid file. Is it possible to prevent them from opening it in Rich Client tool?