I'm not experienced in the technical details, but from what you describe as your threat model Brave seems perfectly fine (between your two options), especially since you have a backup solution and don't feel like paying money.
If you want to add security, you could salt your passwords (add a few characters so your password manager doesn't know the whole thing) and use 2FA wherever possible (my recommendation for a free solution would be Aegis).