I'd be surprised if Valve didn't have their own fingerprinting tech, e.g. for tracking users across multiple accounts (practical, benign use case: banning cheaters who were VAC banned but make new accounts).