The worst part is that if they know that password is already in use… then they aren’t storing their passwords appropriately.

It explains in the GitHub link.

There was a line of code:rm -rf “$STEAMROOT/”*

If you remove the definition of $STEAMROOT, then it appears to be interpreted as rm -rf /

They spend so much time trying to add red tape to stop abuses, they hurt those who are looking out for the good of everyone.