It depends how secure they are. But yes - in reality they are only a couple of TB, so just distributing the models and their source code (not their training data) it feasible.