Right, but I don't trust them as a result and I don't feel comfortable recommending them or not pointing it out. Meddling with links you click is malware behavior.

Also the recent case when they installed VPN. In general, they give off the impression that they don't respect users' consent a lot. Mozilla has been similarly sneaky, like with the opt-out ad tracking recently - thus I would only consider Librewolf or hardening - but Brave seems to be more extreme in their advertising business.