Theora (aka VP2) is the risky one. Though I suppose we're better off using VP8 these days. And Vorbis might be risky, but definitely less so.

Mind you, it won't be Nokia doing this but the MeeGo project, which exists under the Linux Foundation.

I suppose that's a dodge, if there ever was one