Kotlin is made by JetBrains and additionally compiles to native code and JavaScript, OpenJDK is open source, Google has their own JVM for Android. You could use Kotlin pretty much everywhere with no/only indirect Oracle contact.
Oracle owns Java, plain and simple. There are alternatives, sure, but it's foolish to think that when it comes to anything within the Java ecosystem, the buck doesn't stop with Oracle. All they have to do is modify the Java license and all that open source goes poof.
We're talking about a company that sued it's own salesperson for earning too high of a commission.
There is Oracle risk to be sure, but people using the greater java ecosystem are far less tied to the JVM itself than they used to be because of cross compilation to targets that help with ffi boundaries, JIT, IO, memory concerns, etc. That's true with both Kotlin and Scala.
Meanwhile the Oracle vs Google case is still going on.
