One thing that always seemed pretty hard to do in Go was security.
Most companies will stop at SQL Injections but I consider defense against XSS, and CSRF attacks just as important. And that is something Go does not excel at because I have not found any framework that makes adding these features as painless as possible. (I have only toyed with Go for the web so I might be wrong).
Django (a python web-framework), on the other hand, is pretty good at these things[1] because they require little to no extra work, so that junior developers like me will get it right. That is the reason I would always go to Python for web development instead of Go, although, I like Go just as much and it is so much quicker.
I'd be interested to hear how the big projects migrate these kind of attacks in Go.