From a theft perspective, being able to hijack someones steam account is likely to be more lucrative than most. There's a window where they might be able to resell the account to someone who doesn't know how easily valve can verify true ownership and fix it.

You've still got a lot of botnets and cryptocurrency miners flying around. Ransomware is the big one that targets people with important data that a gaming device is immune to.