I think it's unfair to compare the "haptic" feedback of a person being spun in a cyclone simulator to someone being handed a ball to touch. Are you saying you feel like you had vertigo for several days after shooting the novint pistol?
On the other hand this proves that malicious software can intentionally harm the user even when the device is no longer in use.
Only with the user's full cooperation. Video games cause motion sickness in some people too, but we don't worry about malware showing us moving images. You'd just take the headset off, close your eyes or let go of the haptic feedback handset.
If you take a look at the paper that was linked, users were put in a cylinder that had video displays that simulated spinning. I think we've had this since roller coaster simulators, so your specific point has probably been proven since the 90s now. (I vaguely remember the ESPN World in Baltimore having a "design your own roller coaster" ride that allowed you to build a custom roller coaster and then would simulate you riding it.)