Where is your information from? I can't seem to Google anything up. "For the most part, userspace" doesn't really mean much.
It is difficult to imagine the authentication scheme that wouldn't be fairly trivial to crack, given that I have full control over the entire software stack from top to bottom, including not merely the kernel but my choice of hypervisor.
Steam is relatively trivial to crack on Windows as well. Certainly nothing has prevented the various Steam games from being cracked wide open and distributed independently.