Ask HN: Why does steam mobile app guard itself

Im installing stream mobile app and after user name and password it then asks me for a code from steam mobile app. Is valve incompetent? Why would a company have such an obvious circular flow? Is this the peak of software development?