The thing definitely needs to be opt-in instead of opt-out. BAT just recently got some backlash when Tom Scott tweeted that (I'm paraphrasing) he doesn't really like how Brave is using his identity to collect money without his consent.