Soldato
Not much they can do on your account other than playing your games.
And cheat on your games getting your game(s)/account barred, or depending on what payment details you have saved possibly buy/gift a load of games.
Your payment details aren't saved after a transaction.
You can have a cached payment method on steam.
It would take a desktop PC about
6 decillion years
to crack your password