If you're not using your XDP extensions, create mailboxes that match those numbers (the 200 range). That way other users can use the VTR feature to transfer callers to these mailboxes.

And to answer your original question, yes you can have mailboxes with no extension assigned.