TIL that this quick trick [1] also would have prevented this:
${STEAMROOT:?}
...where :? throws an error if the variable is unset or empty. (Still far too scary for my taste, though!)