Hi @SuperBlazor,
Yes, it acts as an iframe. Yes it needs access to the report server unless you use a proxy. To use a proxy you need the ReportController.cs file from here and set UseProxy to true. Even then there could be limitations caused by SSRS's security.