This is the thing everyone always points to when they hand wave "a lot of other shady things" - not sure why folks generally like to FUD Brave. I was working there when this issue happened and it was a very big deal internally and was patched immediately. FWIW I got zero hint that this was some kind of shady thing someone would have been trying to sneak in.