Should well-known things that allocate behind the scenes perhaps also be flagged?

[jroessel]

Calls like string.Substring to which there may be better alternatives using Span.