If Brave is trying to protect clients from malicious ads, then default for site notifications should be set OFF. Many of my senior citizen clients are being bombarded by the pop-right notifications from websites they never intended to allow, but the default of “asking for notifications” prompt is too misleading and they think they can’t use a site unless they give it permission.
Tighten this up and it will be more secure and private