This was my point exactly. A VPN may just as well be used to spy on your traffic rather than secure it. And that’s why I’d be upset, personally: because I don’t trust brave or the company behind it.
But I think the main thing people are up in arms about is the fact that they didn’t ask for it. :)