I’ve just noticed that the .deb package of brave does contain an “/etc/cron.daily” job.
Fortunately my distro of choice removes it as it repackages things. (Arch).
Fiddling with system cron jobs is not the nice and right way to behave.
If it comes to software updates : distro package managers must be trusted. Having a package itself tweak the repo sources (as the job seems to be doing) is not something I’d want to see on my system.
Apparently there are also system-wide parameters in
/etc/default/brave-browser … seriously a browser needs to stay in userland, and should not rely on system-wide configuration.
thanks for reading,