With Java 11, there are supposedly no differences between Oracle and OpenJDK so time to go OpenJDK
OpenJDK will be updated much more rarely, on a quarterly cadence only, including for security patches. So if you go the OpenJDK route, be ready to do some JDK-level patching yourself if you want to mitigate any zero-days that surface.
Fixes will also only be applied to the latest versions, so you'll need to be prepared to live on the bleeding edge and accept all the risks that come with that.