I can understand Brave not putting as much effort into privacy as Tor Browser (especially fingerprinting mitigations). Fingerprinting is difficult to prevent, even using Tor Browser I apparently have a unique fingerprint.

But directly leaking the IP address (e.g. via DNS or WebRTP) is totally unacceptable.