Without this loophole Recall could take pix of password managers and other such sensitive windows. So it doesn't seem closeable without per app exceptions.
But privacy is a bug on a school laptop used by a child. Brave could have a toggle on the feature if it wants to serve that market.