I noticed that the Makefile downloads Go over plain http and runs it immediately. It is a security risk to run software without proper verification of its origin.