> Microsoft-signed Go binaries on Windows (via Windows Update)

There is your answer.