No correction necessary. That's all correct. Something complicated like the JDK would likely need entitlements for the hardened runtime if notarization was desired.
But you're starting to get into obscure technical details here. Why do you care about the JDK anyway?
For the vast majority of Mac apps, the Mac App Store sandbox is all you ever need to worry about. For all practical purposes, you don't have to worry about anything more complicated than the sandbox unless you have guaranteed external funding - and a lot of it - for some very specific end users.
Look at it this way, if you are considering this JDK-based app for someone that you don't already know by name, you are in deep, deep trouble.
Topic:
App & System Services
SubTopic:
Networking
Tags: