https://helpdaz.zendesk.com/entries/124136-distributing-add-on-products-that-use-inj-rem-pose-files

 It's for V3, but I'm thinking the same rules would apply to V4?

 "Because Victoria 3 CR2s are only distributable without DAZ morphs included (even derivative morphs), character add-on creators must rely on the end user to own and inject these morphs themselves, or create a readScript file to inject the morph(s) for them. [See methods of distribution below]DAZ maintains a policy that allows the distribution of most products' CR2 files in order to facilitate the creation of complimentary products by 3rd party developers, as described above"

 It sounds as though as long as the .cr2 doesn't contain any delta/morph information, I should be good? I'm looking at the default Victoria 4.2.cr2 (No morphs injected) and I don't see anything except parameters and readscripts, nothing that can be used to reproduce the mesh.