Will brave debloating by changing registry values create a new attack surface?

Honestly, most of those simply remove bloat and can be configured within the browser to the same effect. You certainly won’t be increasing your attack surface though.

For more thorough browser policies I recommend:

github.com

GitHub - RKNF404/chromium-hardening-guide: Harden chromium (somewhat)

Harden chromium (somewhat)