You have a game ban, not a VAC ban. Account security is your responsibility.
No, nobody can easily steal a Steam account. They would need your account name, password, and Steam guard code, which usually means tricking you into falling for a phishing scam, which you're expected to know how to avoid.