What legal uncertainty? If you violate the license of any GPL component then you're leaving yourself open to a lawsuit. Replacing Busybox with something under a more liberal license only helps you if the only infringing component is Busybox, and I'm not aware of any cases where that's been the case.