Why would I trust a random cropped screenshot from a bad faith subreddit about hating everything related to Epic? Either of us can run Process Monitor, filter by the desired process, and see if their claims have merit. They don't.
The article and post I linked already explain the Steam and process list parts. How in your opinion does any program that needs to check if a process is running do that? Where would you expect Epic to get your Steam friends list if you're asking it to import your Steam friends?
The numbers represent confirmed cases, so there could be more. There used to be a GOG thread dedicated to testing games for DRM on Epic, but then it was locked and its main contributors have switched to adding the information to the wiki.