Simple checking that games won actually appears in their Steam library would be enough to catch any cheaters that exist.

It seems odd that this isn't being done. The script would be easy enough to write, and could be done offline from a data dump, say once a month.