In some sense, GOGs entire existence is testing the hypothesis that it's impossible to run a consumer friendly digital store due to abuse.

If you took the common sense publisher view then no DRM = everything you make is instantly pirated and the whole store fails instantly. But GOG is a viable storefront, so that's demonstrably wrong.

The evidence is no better for Steam's refund policy than it was for DRM being necessary.