I believe that it’s specified in the architectural reference framework that it has to re-validate every session, to ensure that the token hasn’t been revoked. I’d be happy to be corrected, though!

I wouldn’t mind some moderation, but for the love of god I hope countries won’t block Steam over this. I have so many games there, and I can’t remember the last time I bothered to read a review.