Do you actually use that option at enterprise scale? =3
https://openjdk.org/groups/vulnerability/advisories/
https://app.opencve.io/cve/?product=openjdk&vendor=oracle
It’s much better than ideal.