<!-- Our proposal process is documented here: https://go.dev/s/proposal-process --> https://github.com/golang/go/issues/20661 now, we only deprecate math/rand.Read , in initial proposal suggest add a math/rand.InsecureRand in many cases (like only create a random string in internal system for idempotent), we need math/rand. So, we should give developers a choice.