Looking at the source code [1], I have to agree with you. This is very easily detectable by anti-tampering scripts. Using JS Proxies would have been a better ap

Looking at the source code [1], I have to agree with you. This is very easily detectable by anti-tampering scripts. Using JS Proxies would have been a better approach, although that is detectable as well (see e.g. [2]). To be really undetectable, the mocks should have been done on V8-level. 1. https://github.com/brave-experiments/sugarcoat/blob/master/mocks/navigator.js https://github.com/brave-experiments/sugarcoat/blob/master/m... 2. https://github.com/abrahamjuliot/creepjs https://github.com/abrahamjuliot/creepjs