Right. Back in the day when CS:Source was still one of the main games played on steam, whenever they released a new single player game, the limiting factor for how long until it was on the pirate forums was how long it took to write up the forum post. The Steam DRM itself was generally cracked at all times.
I've not kept track, but I'd not be shocked if this was pretty much still the case. It would certainly explain why so many games still have another layer of DRM when sold on steam.