Don't sit on steam cash. Steam doesn't use authenticator so if you get session hijacked someone spends all of it on a five cent skin for a game you don't even play with an address that's all ones. Wouldn't be hard for steam to add verification, but free money for them I guess. (2024)
at least I recovered my acct...