exactly. If you block go packages via firewall IT rules, you block github.com software engineering work. It's the one thing I think that's holding Golang back. Deno as well. I know it looks novel but it's a security nightmare.
If someone works around that on a developer machine, it shouldn't matter, because release builds should still come from an automated system, right?