Interesting that despite the huge effort both sides put in to to fixing/exploiting vulnerabilities the biggest risk factor seems to be directly downloading random dodgy stuff.
I used to use this software called Clean Slate that would watch all the changes you made to your computer and undo them when you restarted. Maybe it's time for Grandma to get her own Docker instance.... :-)
I've never heard of something like that happening, and I've been using Steam since day 1.
Trying to find something on Google about that only turns up the usual "Hijacked accounts spreading malware to friends" scheme [0] and vulnerabilities in the client itself [1], but nothing about Steam distributing malware hidden in games.
Which is kinda unexpected, I probably just didn't dig deep enough?
[0] https://www.hackread.com/hacked-steam-accounts-spreading-mal...
[1] https://thenextweb.com/apps/2019/03/21/valve-steam-vulnerabi...
Conversely, putting a huge financial and certification burden on developers hurts power users and enthusiasts-- how do you bootstrap a new programmer if he has to spend a week generating (and paying for) certificates and learning signing tools before he can emit his first "Hello World?"