No. It takes two of the three institutions protecting your vault to move your bitcoin, so Onramp can't move it on its own. Nothing moves without your permission.
Every withdrawal from your vault starts with a request you make in your dashboard. You then pass an identity check and video verification calls with Onramp and with BitGo before the transaction is signed. Onramp Guardian adds controls of your choosing, such as withdrawal delays.