Steam's DRM is optional (edit: by this I mean it's a checkbox that the devs can tick if they want Steam DRM for their game) and extremely lightweight to be fair, and it's been cracked for 2 decades at this point as well.

MTX and Always-Online BS is also down to the individual games, nothing Steam can do about it realistically.