As far as I can tell, Brave is doing both. The money rests in a third party account that has no affiliation with the receiver, and they have no way of getting to it until they register.

To put it succinctly, I think it's unethical for a platform to accept payment on my behalf without my permission.

(whereas yeah, I don't consider holding money in escrow unethical)