I think you probably don't realise you hate standards and certifications. No IT person wants yet another system generating more calls and complexity. but here is iso, or a cyber insurance policy, or NIST, or acsc asking minimums with checklists and a cyber review answering them with controls.
Crazy that there's so little understanding about why it's there, that you just think it's the "IT guy" wanting those.
Gog doesn't* (as often?) sell licenses that can be revoked as part of purchasing eula and therefore shouldn't really have to remove the misleading 'buy' word.
Many steam games you don't own and aren't buying, you're being granted access that can be revoked by the property owner. That's not just steam.
*I'm not a big Gog or games purchaser in general so I'm not sure if that's accurate. I'm sure you get the point though.