The models should be limited to within the confines of the s3 location you specify (and the physical deepracer device) unless you explicitly permit otherwise. Nothing that I see in the terms of use [0] cover access to the model.

[0] https://aws.amazon.com/deepracer/device-terms-of-use/