4 points by ggpsv
I thought it was not possible to reliably drop privileges in Go, but this is fixed since Go 1.16.