Yep. It’s safest to classify using Oracle software as a business risk. After a due diligence evaluation it may be an acceptable risk, but you darned well better research it before assuming everything will be fine.