It's in page 18. If you have end-to-end encryption you can't sanitize in the client.
I mean, you're really just summarizing the presentation. It should be an API that's in the browser. It isn't. So people need to use a library. That's OK. But not great.