This is hilarious. But expected, as the steam.sh script is horrible in more ways than one. Sloppy and ugly. It's not an attack against whoever did this, just an opinion on the code itself.
What I find to be even more amusing is that less than a day before this came to light, I've moved my browser and Steam into separate chroots just in case. And got a lot of people telling me I'm paranoid and stupid for doing so, as it's more trouble than it's worth. Well who's laughing now, bitches? :D