I'm open to discussion. 1. golang source code last I checked is not even signed, and vulnerable to supply chain attacks. When I brought up this concern with the devs they lacked interest in basic proper security practice and said something like "we dont have the time to sign" or some weird comment like that 2. golang is compiled in golang, you cannot compile golang without first compiling golang to compile golang to compile golang. You have to do some weird ritual of where you have to install some ancient version of golang then work your way up in order to then be able to compile golang which is written in golang. Which goes back to issue number 1 I consider anything written in golang as potentially backdoored. Since the compiler is neither signed, NOR really open source, this is a problem, it can inject backdoors in whatever it compiles.