These two posts are related, even if they don't seem to be: https://www.zdnet.com/article/remote-code-execution-vulnerability-patched-in-valve-steam-client/
Steam needs to update to patch security holes, and doing it with still supporting back to XP means using compilers that target such, which...