I think the assumption that Valve would choose user protection over getting games to work is flawed, they want openness where possible because they see it as a competitive advantage. With VAC they clearly think that maximally invasive anti-cheat isn't necessary so maybe they'll try to push providers in that direction?