Brave is built with privacy firmly in mind. It features a built-in ad-blocker, tracking protection, a script blocker, and HTTPS-Everywhere style functionality (where it forces a secure HTTPS connection whenever such is possible).
The browser also allows you to block all cookies or just cross-site ones, and features one-click anti-fingerprinting and WebRTC leak protection. The latter is particularly relevant here, as the main reason WebRTC leak protection exists is to prevent your real IP address from becoming exposed when using a VPN
Also, through no fault of its own due to being based on Google's open source Chromium broswer, WebRTC can only be blocked by a browser extension, which is not even close to 100% reliable from a security standpoint.
Out of the box, which is how most people who know jack shit about browser security will use it, Brave browser will leak WebRTC. You can test this for yourself at sites such as https://ipleak.net
I'm providing the information. Do with it what you will.
Brave doesn't allow you to disable WebRTC, so VPN really doesn't protect you all that much there.
https://archive.is/cexE1
Except Brave doesn't block WebRTC by default.
Also, through no fault of its own due to being based on Google's open source Chromium broswer, WebRTC can only be blocked by a browser extension, which is not even close to 100% reliable from a security standpoint.
Out of the box, which is how most people who know jack shit about browser security will use it, Brave browser will leak WebRTC. You can test this for yourself at sites such as https://ipleak.net
I'm providing the information. Do with it what you will.