The diff contains this addition:
fetch("https://dl.min.io/server/minio/agplv3-ack", {
mode: "no-cors",
})
This looks like it could be the "you downloaded the Virtual Box Expansion Pack from a corporate IP" Oracle playbook to me. Certainly falls under "mistreating the user".