No, it's certainly not the only way to go.
In regular Onyx, you can park the (still encrypted) .upx in /scard
You can navigate to some dialog for "Start update", but I forget how to get there.
You can just:
Code:
$ am start -n com.onyx.android.onyxotaservice/.OtaInfoActivity
I think.