In theory it had memory protection. Processes were reasonably protected from accidentally stepping on each other's tires, but the OS was not. Any app that tried to be clever (which there were plenty of understandable reasons for) or was actively malicious could mess with absolutely everything.