1. More than 12 employees at the time of ICO. 2. Check the UGP status. Tis well distributed. 3. Check the payout to freecodecamp, over $2k.
Edit: not exactly decentralized in practice.
As a hypothetical example, imagine that Brave is sold, and new owners changed the code so that 50% of the tokens go to the PRESIDENT RE-ELECTION FUND, instead of the website user looks at.
Brave could make a new BAT token and point their browser to use it, but they don't get to do anything with the original code controlling the tokens everyone is already using. It cannot be disabled, modified, or deleted, by Brave Inc or by any person.
[1]: https://etherscan.io/address/0x0d8775f648430679a709e98d2b0cb...
This by itself is strong proof of centralization. Brave can unilaterally make this change and give themselves total control over BAT 2.0 while leaving the original BAT worthless.
HNers should be rooting for crypto to succeed - decentralized networks have the most promise for protecting privacy. Federated networks like email result in centralized entities - decentralized protocols like BitTorrent remain much harder to shutdown.