Prioritize the use of memory safe languages wherever possible. The authoring agencies acknowledge that other memory specific mitigations, such as address space layout randomization (ASLR), control-flow integrity (CFI), and fuzzing are helpful for legacy codebases, but insufficient to be viewed as secure-by-design as they do not adequately prevent exploitation.
https://media.defense.gov/2023/Apr/13/2003198917/-1/-1/0/CSI_SECURE_BY_DESIGN_DEFAULT.PDF