Reproducing Go binaries byte by byte
> Note: the default GOROOT, the one that the compiler will use if the environment variable is not set, must also match, since it will be copied into binariesThis seems worrisome for the privacy of builders. What if someone wishing to stay anonymous built and distributed a Go binary from a system where GOROOT included their home directory and revealed their identity? Am I misinterpreting something?