I don't use Brave, but software updates install new stuff all the time. I don't see why this is news.
Now if they start routing all of your traffic through their VPN, that would be news.
I don't think every new feature an application depends on needs user consent to install.