I think you should take another look of OneDrive at least. You share files for download via OneDrive providing Read access. Read access will still allow download. The write Access to the file located on OneDrive would be disallowed. After a User downloads the template file, they can interact with it normally. You would always have control of the file and could revoke read access and edit the file to update it.
The link to file could be issued in different ways, but you would likely need to use the "anyone with a link" option. One link for everybody and they would only see the path to that shared Folder/File. If they have a OneDrive account, it would be listed in their Shared Items.
If you are in an enterprise license of OneDrive, you will have better options.