Huh, turns out that USB 2.0 hubs actually behave like Ethernet hubs in the sense that they replicate traffic incoming on the upstream port on all downstream ports.
This means that you could make a malicious USB device that snoops on data sent to a USB mass storage device or so 🤔