Current microcontrollers often have better protection mechanisms than that. Not necessarily fully capable MMUs, but sufficiently capable ones to allow for protection, as well as kernel/userspace separation.