The go binary would be downloaded automatically and silently periodically. I tried to fight it for a while but at some point he added checks (!) to ensure that nobody was blocking his RCE model. Meaning it would no longer run on one of my partially air gapped system.
I moved on, but many other software behave that way.
Most chromium-based browsers will show a big scary and permanent button if they can't update, for example.