Hmm, could you elaborate a bit on your concerns? Put another way, what's the worst that could happen?.
Also, it seems to be GPLv3 licensed https://github.com/soyjavi/tuktuk#licensing-options with a special commercial license for OEM's. I don't know how exactly that works - i.e. their methods of detecting OEM users and definition thereof (hence, without knowing these things, I see where problems could come about, but how likely are they to?)