because presumably steam can't guarantee any of the usual anti-fraud schemes or other obligations they have if the financial transactions happen outside of the purview of the ecosystem.

Obviously it's about control and understandably so because letting uncontrollable financial transactions happen within applications on your platform sounds like a legal nightmare waiting to happen.