Thanks! That's very useful to know - I'd have assumed it can only see it's own files within the wineprefix folder.

It looks like trying Steam within flatpak, and limiting the flatpak's access might offer some protection. Or maybe getting stem to run as a different user.