Comment by JetSetIlly

By default, all go mod downloads go through the golang proxy (https://proxy.golang.org/). That is part of the verification process.