The framework they're working with here isn't about specific recommendations like this. It is about non-memory safe languages, mitigations you can try to add sa

The framework they're working with here isn't about specific recommendations like this. It is about non-memory safe languages, mitigations you can try to add safety, and a framework for moving towards memory safe languages over time. It's at a higher level of abstraction than "specific language with specific technique." In the PDF the closest things they talk about to sanitizers are SAST/DAST tooling, which isn't exactly the same thing, and compiler mitigations, which aren't exactly the same thing, but I also don't believe this is intended to be fully comprehensive at this level of detail.