Singularity used Software Isolated Processes. Basically the apps were distributed as .NET bytecode, compiled by Bartok on the target system to native code. That guaranteed that processes never accessed each other's memory so you wouldn't need regular process isolation.

I haven't thought about the implications to reading kernel memory but it'd be great to see a paper on the subject.