We have broken compatibility once before in the standard library for security reasons. The go1compat doc says we're allowed to: https://golang.org/doc/go1compa

We have broken compatibility once before in the standard library for security reasons. The go1compat doc says we're allowed to: https://golang.org/doc/go1compat https://golang.org/doc/go1compat > Security. A security issue in the specification or implementation may come to light whose resolution requires breaking compatibility. We reserve the right to address such security issues.