Up until ~5 years ago, hacking U2F to make it pass (smuggle?) arbitrary data was exactly how hardware wallet like those from Ledger and Trezor were communicating with websites and web extensions (like Metamask), for the lack of a better alternative.
This is how hardware secured "web3" came to be.
Because brave has a questionable business model where they, on one hand, block third party ads and trackers, and on the other inject their own ads, tied to their BAT cryptocurrency (the latter part being opt-in IIRC).
They also:
- added their own affiliate codes when visiting some sites [1]
Up until ~5 years ago, hacking U2F to make it pass (smuggle?) arbitrary data was exactly how hardware wallet like those from Ledger and Trezor were communicating with websites and web extensions (like Metamask), for the lack of a better alternative. This is how hardware secured "web3" came to be.