Actually, segmentation isn't available on 64-bit Windows kernels (rather than just in x64 mode). So, NaCl already used a different type of sandbox model, where the validator enforces read/write masking.