I apologize for the wait and we appreciate your patience. The difficulty of the question isn’t relevant - if you approached us for an answer you likely couldn’t find it yourself so your statement doesn’t track.
I’m more than happy to help you or any other user troubleshoot, resolve an issue, answer a question, clear up a subject or anything else one might need. However, demanding [free] support in this way is not appreciated. If you find yourself posting an important topic that doesn’t get answered again, you’re welcome to “bump”, but be respectful. Alternatively, feel free to message me directly if you feel strongly about getting your question or issue resolved (again, respectfully).
As for your question: In both the live release and Developer version of Brave, websites must request permission to access any user data, be it in your browser(bookmarks, history,etc) or your system (eg, camera, microphone, etc). The user must explicitly grant the site access to the requested permissions.
Note: You have the option, as you may have noticed, to automatically allow access to certain domains so that you’re not asked for access to the same permissions every time. Its relevant to note that this is still considered granting permission, as it’s still under the users control as to whether or not the site should continue to ask.
This applies to extensions as well, although the permissions granted are usually either required in order for the extension to run or individual permissions may be allowed/denied from within the extensions settings themselves.
Note: Pay attention when installing an extension to what you’re granting it access to. Many people will add and install an extension without a glance at what they’re agreeing to. You are notified of any and all data the extension has access to both before install (that is, in the CWS) and at install.
Hopefully this clears things up for you. Let me know if you need further explanation.