You are correct, the only component that requires Java is the Framework web application that the Background Services service is pointing to. This is generally on the app server. You can safely upgrade Java if updates become available.
Thank you Stu. I can confirm this is true as we removed Java from our web servers, and updated to the latest version on our app server.