They block the website’s own ads, but inject their own instead. So the user still gets ads, but the profits go to Brave. I know that if the site’s owner is aware of that and goes through the process of registering with Brave they get a share of the profits, but this should really be opt-in. As it is, the whole scheme is shady as fuck.