[rchaud]

They installed their homemade VPN as part of the general browser install, without disclosing it or giving users ability to opt-out.

It's now possible for them to start proxying traffic through their servers, also without disclosing it to you. While this is likely just a case of them aggressively bundling their paid service bloatware, the fact that it's built into the app should be concerning.

[Vinnl]

Why would they need the in-between step of installing-but-disabling it first? If they are planning to do that, and you already have Brave installed, can't they just install it at that point?