The Arch Linux maintainers, on the other hand, already tried and gave up on isolating Go and Rust builds from the network, from what I’ve read. (That was for package dependencies and not the toolchain itself.)