Right. Back in the day when CS:Source was still one of the main games played on steam, whenever they released a new single player game, the limiting factor for how long until it was on the pirate forums was how long it took to write up the forum post. The Steam DRM itself was generally cracked at all times.

I've not kept track, but I'd not be shocked if this was pretty much still the case. It would certainly explain why so many games still have another layer of DRM when sold on steam.

The cracks are often where the malware is injected, and what is detected by Windows/AntiVirus.

Without DRM your product can just be repackaged and resold, like what happened to the GoG version of Frostpunk being sold on Amazon.

I would have liked some basic version of DRM as well. This will drive a lot of developers to Denuvo, which might be overkill.