Oh, to be clear, I would not do this if I needed that degree of reliability.

Or maybe I would use an MMU but drive it with a kernel written in the old fashioned way with no allocation. It would depend on what hardware I had available and what faults I wanted to survive.

(I’m not an aerospace software developer.)