I was thinking, that single space os should have weak security, but it seems I was wrong. This is a very interesting paper -Sharing and Protection in a Single Address Space Operating System
This paper explores memory shanig and protection support in Opal, a single address space operating system designed for wide address archtectures. Opal threads execute within protection domains in a single shared virtual address space. Sharing is simplified, because addresses are context-independent.