Isn't vfork much worse in terms of the problem the author is talking about, since the child can now acquire locks in the _parent's_ address space?
the posix_spawn mentioned in the article is effectively the equivalent of CreateProcess
In Solaris/Illumos it uses vfork() or vforkx().
In principle posix_spawn() can be a system call.