Since they announced adding malware in the toolchain (sorry, khem, telemetry) I somewhat lost interest in Go. How do I know which version has spying turned on

Since they announced adding malware in the toolchain (sorry, khem, telemetry) I somewhat lost interest in Go. How do I know which version has spying turned on or whether this was abandoned? edit: I wonder if this was mandated by Chinese government, as certain Go tools that help circumvent censorship are written in Go and maybe government wants to know who compiles them.