The lack of protected memory was pretty insidious—essentially the kernel relied on application memory for its own internals in MacOS, and reentrancy was a problem for, oh, everything. Copland was to fix that first problem though (but only for new apps).