I think the fear mongering on Steam is excessive. The games stay offline on your disk, and most of them don't have a DRM. Gabe Newell has also said that, in case Steam ever shutters, an exit plan will be provided. As for the Steam native DRM, there are already open source implementations that can be used to bypass it and Valve hasn't done anything against it in years - so the only problematic DRMs are Denuvo and similar, which Steam does not control.
GOG used to be a valid alternative, but it isn't anymore. With CDPR themselves publishing games with DRM on GOG, on top of starting to be lenient on DRMs, they are literally having something similar to a DRM that is required for some games, a GOG Galaxy API that is completely closed source. And it doesn't support Linux, the FOSS operating system.
The fact that after years GOG still doesn't seem to care about Linux, CDPR releases their games for Windows only (and more often than not with DRM), and Cyberpunk 2077 only runs on Linux thanks to Valve's efforts is also worrying from a game conservation and ownership standpoint: Windows is a Proprietary operating system completely controlled by Microsoft, who can perform modifications remotely and is allegedly planning to popularize a model where people are sold very low spec PCs that only need to stream a Windows computer from the cloud with more powerful specs… not the platform I want to entrust the future of gaming to.
All in all, Steam is still the mainstream gaming platform I dislike the least and trust the most. If I'm going to buy a game and hope it's going to be playable decades into the future, it used to be GOG, but now it's Steam from me.