Well, system-wise Go app is just a binary that only needs network access, could be run directly from systemd and just have all permissions set there.

Docker is a bunch of file mounts and app running in separate namespaces. So extra daemon, extra layers of complexity. Of course if you're already deploying other docker apps it doesn't really matter, as you'd want to have that one binary in docker container anyway just to manage everything from same place.