Well you've hit the nail on the head really. Unless it's signed somehow, what stopping Brave providing random to the websites, thus meaning they're unable to tr

Well you've hit the nail on the head really. Unless it's signed somehow, what stopping Brave providing random to the websites, thus meaning they're unable to trust the result making the whole thing moot? Worse yet, if there is a signing process, that'd be a verifiable way of proving a user's client-browser, which is arguably worse.