yeah, tf being go recommends a specific goreleaser.yaml so the idea of just uloading the module.tar.gz is the same, its probably the best way to go considering the risks and costs