At the company I work at we needed to use USB 3.0 devices for which you need the extension pack (Windows hosts, Ubuntu VM).
For commercial use you need a licence to use the extension pack, so I don’t know how Oracle knew of the abuse of some employees but our company received a communication reminding about the licence rule.
I wouldn’t be surprised if somebody does end up pwning them with a ransomware out of spite.