Steam does now work with Sandboxie, but I'm against having a third party program whose only purpose (on my system) is to certify that a game can run. There's no technical reason for this. People will cite integration, but no API actually requires that an application be running. No DRM is the ONLY good option in my book; disc check is the least bad of the having DRM option. It's time for the game industry to learn what the music industry had to learn the hard way: DRM is bad for the consumer, and it doesn't work against piracy. And for anyone who thinks that a pirate is going to say "I can't get a pirated copy until a few days after release so I'm going to buy it", I hate to say it, but you're completely crazy.
As for AV, what I said was that most solutions are essentially bloatware (which is the consensus among people who actually know something about security, unlike you). I'm a happy user of Microsoft Security Essentials, which is one of the few AV solutions that isn't a performance hog to some degree (NOD32 is the other one I know of; even Avast and AVG make your computer take a noticeable performance hit). Or are you going to call Steve Gibson (the person who discovered spyware and the original author of AdAware before he sold it to Lavasoft), who was unable to recommend AV software until Microsoft Security Essentials came out due to cost/bloat, a crackpot?
I would really appreciate it if you would stop misrepresenting my claims.
PS: a sandbox and a virtual machine are two completely different things. Do your research next time before posting.