The one thing I hate about go programs: People writing stuff in go usually have install instructions: curl <url to some binary> > ./<random binary name> && chmod +x ./<random binary name> && sudo ./<random binary name>
Sure, we complain about curl | bash but this is EVEN WORSE!
AppImage runs a whole lot of system binaries when it runs, including SUID AFAIR, so it's probably even worse. I found it when I tried to confine an AppImage ImageMagick with AppArmor π