I'm not sure what happened in your case, but it probably wasn't what you describe. We changed goimports in 2016 to prefer crypto/rand over math/rand (https://go-review.googlesource.com/24847), and that was before there was VSCode support for Go.
Now that math/rand.Read is marked deprecated, at least if it does get selected, you get a nice strikethrough rendering as well.