Read permissions should be enough, I’ve got mine in a freebsd jail with the media dataset mounted into it read only.

Not necessarily, steam includes a windows compatibility layer making many windows games playable on Linux and that’s how most steam deck games run. On stream deck specifically the battery life and performance is often better under this translation layer than installing windows and running them natively.

Edit: Just skimmed the article, this is exactly what it’s about.