I have the same problem. Without authorization BATs were send from my Uphold wallet to Brave Publishers. Could you please send instructions how this can be solved. In the. meantime I disabled Brave rewards because this was highly suspicious, unsecure and unexpected.
go to Integration and check the permission you have/that were configured/enabled with Brave and you can see that Brave can everything and don’t think that this is good … all BAT’s were transferred. And this is not a matter with 2FA because it’s enabled since day 1.