Depends on your security model. You don't have to use the oracle. https://help.blockstream.com/hc/en-us/articles/20144489592857-Use-Jade-as-a-stateless-signing-device