There should be locking getters/setters for the environ, and all users should switch to them.

Yes, it will take a long time, and some users will complain it doesn't work on their PDP-11, but the problem will never be solved if there's no migration path to a safe solution.