Reproducing Go binaries byte by byte
> Note: the default GOROOT, the one that the compiler will use if the environment variable is not set, must also match, since it will be copied into binaries<p>This seems worrisome for the privacy of builders. What if someone wishing to stay anonymous built and distributed a Go binary from a system where GOROOT included their home directory and revealed their identity? Am I misinterpreting something?