The simple answer here is _run_finalizers() is not thread-safe, but finalizers can be registered or cancelled from any thread.

I could not write a simple synthetic script to reproduce the issue, but it should nevertheless be fixable.