Invoice PDFs should be password protected and the instructions for opening the file should be mentioned in the email.