The Oculus privacy policy indeed indicates that they collect "information about your physical features and dimensions" as well as "information about your environment, physical movements, and dimensions when you use an XR device".

Their information collection is a legitimate concern precisely because they have both the incentives (profiling and advertisement) and legal basis to collect it.