Any community jars (which should all start with dremio-ce) are basically represented by those 4 mentions in LICENSES_FOR_DEPENDENCIES.md. As we want users to have the best experience out of the box, those components are shipped as part of the Dremio Community Edition. For people who want to get a pure Apache License experience, they can use the dremio-oss repository to build their own distribution.
The Apache Foundation has a strict set of rules regarding what a project can use or not as dependencies, based on their license, but those rules only apply do not apply to other projects using the Apache License (as long as the involved licenses allow it).
I reported this conversation to our website team to see if/how we can improve it to avoid any confusion.