I really like the way they separated execution and writing memory capabilities. This makes it possible to write code, then run it, using separate capabilities, but no code can modify itself directly by mistake.