An open market of goods invites malware. Do you think Valve has an obligation to police their store for malware? If so, where is the line between software that

An open market of goods invites malware. Do you think Valve has an obligation to police their store for malware? If so, where is the line between software that doesn't function as advertised and malware? What if it's poorly written malware that doesn't actually run?