Google put an API into Chrome that sends extra system info but only to*.google.com domains. In every Chromium browser.

Only vivaldi caught this issue. Brave had this api enabled, most likely on accident.

But the problem is, that chromium is just such big and complex software, when combined with development being driven by Google, it’s just impossible for any significant changes or auditing to be done by third parties. Google is capable of exteriting control over Brave, simply by hiding changes like above, or by making massive changes like manifest v3, which are expensive for third parties to maintain.

Brave can maintain 1 big change to chromium, but for how long? What about 2, 3, etc.