Steam does not hold onto BTC, BitPay collect the user's payment, tells Steam to release the order and writes a USD.cheque to Valve once in a while after taking their cut. The system worked until network congestion and market volatility made it impractical.
The only major online retailer that actually keep their own BTC is Overstock.