The extension pack covers "Support for USB 2.0 and USB 3.0 devices, VirtualBox RDP, disk encryption, NVMe and PXE boot for Intel cards." according to the website.
https://www.theregister.com/2019/10/04/oracle_virtualbox_mer...
Nothing is forcing Oracle to "routinely check log files for downloads of the VirtualBox Extension Pack from nonresidential IP addresses and contact unlicensed users to enforce compliance" (per https://en.wikipedia.org/wiki/VirtualBox#VirtualBox_Extensio...). They could easily just say "this software is free for commercial and non-commercial use."
The choice is not ‘this model or nothing’, Oracle is about the only company this aggressive.
(Apr 2018) - https://old.reddit.com/r/sysadmin/comments/8ffcg3/oracle_is_...
(Sep 2019) - https://old.reddit.com/r/sysadmin/comments/d1ttzp/oracle_is_...