Unfortunately, you are wrong. This kind of devices is very well capable of damaging the USB interface, provided the capacitance and the pumped voltage are high enough. You say that the human body is a big capacitor walking around, but that is not totally correct. In fact, the human body is often modeled with a 100 pF capacitor, which is not that large. Common ESD protection is not sized to protect against intentional attacks.