I don't know why you would say that about Go, you're never more than one programming error away from creating a RCE vulnerability, no matter the language. Linke

I don't know why you would say that about Go, you're never more than one programming error away from creating a RCE vulnerability, no matter the language. Linked RCE should demonstrate that quite clearly, don't you think? Either way my point is that software contains vulnerabilities, especially software that hasn't been hardened to be exposed to the public internet. Exposing it to the public internet anyway is a display of bad judgement, doubly so when the person responsible seems to believe that the worst thing that can happen is someone using the software as intended. Details of specific vulnerabilities are really beside the point here. Assuming that the happy path is the worst that can happen is simply naive, there's no two ways about it.