A few days later...

The keys were given in plain text to this intermediary at some point. A copy of said text should exist.

The Steamworks Documentation explicitly recommends tagging the keys to keep track of them and potentially prevent this kind of issues.

They don't know the keys on G2A

But they should. Someone at RWS generated those keys and then sold them to resellers. Even if they don't personally keep track of the keys, Steam probably does.

I guess they don't want to affect users who already paid for a key even though they have the right to do so. Honestly, I've had keys revoked from my account before, and it sucks to waste money in scammers.

Hold on a minute there. Developers must generate the keys in order for third parties to resell them. And they can revoke or disable them if they were obtained fraudulently.

What's the point of any of this? Just disable the keys, and fuck the scammers.

I've always liked Saidit's "two upvotes" system. It's so simple and creative, encouraging discussion rather than the mindless brigading that becomes so common with the vote wars for visibility.

Why would you want this place to be like reddit on such small, insignificant details? Building an independent, unique identity beyond reddit alternative should be the plan.