Exactly what I came to comment. Same thing here, they seemed to hyperfixate on the extension pack which most VBox users would need. We had to get everyone off that as soon as possible.
Of course this isn't limited to VBox, but their database as well. Just avoid.
Just noting that USB 2.0/3.0 support no longer requires the extension pack, and the list of features [1] that require the extension pack has been gradually decreasing. It may not be as necessary as it once was.
If your organization uses any Oracle software then I'm certain that the organization has agreed to let Oracle audit it for license compliance at any time.
Of course this isn't limited to VBox, but their database as well. Just avoid.