Just publish the exploit. That'll get Valve off their bottoms once public lobbies start to install ransomware with cryptominers.
Player with a multi million dollar skin inventory gets everything stolen and sues valve on the grounds that they were negligent custodians of their service.