I'd rather not use flatpack, but I really should figure out better sandboxing. Not just for games, but for supply chain attacks, etc.

It's kind of nuts that a game has access to my browser profile and all sorts of other stuff in ~.

Imagine being a dev and having this happen to you. Still, MFA is a thing.

Long ago when Linux was a complete underdog (0.001% of users or something) it was touted as being vastly more secure than Windows, and that was probably true. But, convenience always battles with security in adverse ways, and Steam does aim to be very convenient.

I remember for a time any Xbox-app game would prop up a UAC permissions dialog each time you'd newly installed a game. Those apps are also un-moddable due to package signing. It was very annoying, but part of me thought "...Theoretically, Steam should be doing at least something like this."

The “FAQ” on this article feels like they just took an LLM sum marry and added it to the bottom hahaha