Yes and yes. Valve has been known to remove games from Steam accounts in cases of abuse, e.g. credit-card fraud or stolen license keys.
It's a blanket policy and a reason why I never use Paypal for Steam, use a real or "throw-away" credit card for Steam purchases. Alternatively, you could not buy from Steam at all, I don't anymore but it's too late for me. I already have over 200 games with them and worry about losing access to everything.
I've also heard that Valve will remove games that were acquired through the trade system if the original buyer obtained them fraudulently.