That document does not have the 2026 deadline. Instead, "At the same time, the authoring agencies acknowledge the commercial reality that transitioning to MSLs will involve significant investments and executive attention. Further, any such transition will take careful planning over a period of years." Also for the roadmap "agencies urge executives of software manufacturers to prioritize using MSLs in their products", not eliminate C. And a lot is about accountability: "The authoring agencies encourage software manufacturers to lead from the top by publicly naming a business executive who will personally drive the elimination of memory safety vulnerabilities from the product line."

https://www.cisa.gov/sites/default/files/2023-12/The-Case-fo...