This holds up if you actually do review all Go dependencies.

Times are changing, so all the power to you if you actually review it. Otherwise the advantage will remain a potential, never to be realised.