For a browser that claims to be privacy focused, I would expect them to tightly contain the code in an external module that can easily be turned off.

I would absolutely expect them to pull the whole thing out.