Hello, ubuntu 16.04.5 user here.
Today I downloaded brave (apt way) and started using it, I imported my data from my default chrome settings (history, bookmarks, passwords).
The process was smooth, what I find concerning is how brave is capable of importing all my passwords from chrome, I know chrome is not very safe about saving passwords, but leaving any external app reading all my passwords with a single click - not asking for additional permissions or an extra password (like firefox) makes me uncomfortable.
IMHO that means that passwords must be saved somewhere in my chrome profile unencrypted (or encrypted in an easily known way) - and that means that any program that I install can potentially read all my passwords without my knowledge, of course in the case of brave I pushed the import button, but I guess any other program could potentially read all my passwords and send them out without even clicking a button.
I think that’s a big failure of chrome, does brave have the same issue being based in chromium?
Is this a big issue, or I’m just being paranoid?