Not sure I agree, how else are they meant to prevent the ocean of “It wasn’t me, it was my brother” excuses from hackers smurfing accounts?
I’d recommend (to everyone) that if you’re unsure -or have even the slightest doubt about the person you’re going to give access to your Steam account- to politely decline and play it safe.