Yep, that's pretty shitty. I don't know what info brave asks for, but I have pretty tight PII requirements for services I use. If I think Braves terms are unreasonable, is there a reconciliation process I can undertake, or does brave just keep my readers tips? Shady as fuck.
I just finished the process. To verify a site, you upload a file to the site, or add a DNS record, and then you can access your BAT. I don't know how you can withdraw, though.
EDIT: Oh, wait, they make you register a wallet on a site called uphold.com, which will just send the tokens to your Ether wallet or convert them to another cryptocurrency or pay you to your bank. You do have to register for KYC after $1000 worth of income, they say.
