Hi,
We do allow for remote configuration, as long as the full set of behaviors of your extension is easily understandable from your submission.
We haven't looked at .onnx files with this policy in mind, so I can't give a definite statement I'm afraid. Based on a quick glance, it seems there is more than raw data (including some information about the model graph), but I didn't immediately see anything that looks more arbitrary in nature. With that in mind, this might be ok, but I wouldn't be able to promise anything.
I hope that helps!