The last few years have certainly taught us that spending lots of money, and even hiring good engineers, are no guarantee against being hackable.

(And Steam's front-end designers are not great to begin with. Have you used their UI much?)