Steam's in-game overlay has a fully user-controlled browser running on the same engine. Some people use that to open something like a game wiki, and malvertising is a real risk. (In addition to just wanting somewhat secure browsing as a baseline)

Also: I'm not sure if links sent in Steam chat, when viewed in the overlay, open there or with the system browser.