Malware these days often relies on the ability to walk off the end of an unchecked array and smash a return address on the stack. Not something that thread-safety would help with. Look up Return Oriented Programming for a description.