It's not that different a situation. Chromium is open-source, but it's not community-based. If Google wants to do a rug-pull on Brave, they can do so at any time. Not as trivially as if it were closed-source, but not that difficult, either. I doubt Brave have the resources to maintain security updates, much less keep up with standards, on an abandoned browser engine codebase.