Untrusted executable code that's expected to be a modified version of the real thing, making hash-based assurances impossible in most cases. Sounds secure to me. /s

It's kind of sad, in the days prior to torrents security used to be reputation-based. Not to mention a dynamic where reversers look at each other's work. Since the advent of torrents and with just the sheer amount of games now, I imagine that's suffered quite a bit.

Some forms of DRM are arguably malware in and of themselves, so it's ironic that attempts at bypassing that end up as a vector for serious malware.

What worries me is since Steam opened its floodgates, theoretically lesser-known titles could be vectors for malicious code. Or heck, even larger titles. What assurances are there, actually? Trust in the publisher and developer is about it.