[updated below]
The answer apparently is that the techniques used to design for risk are just completely broken; and do not account for the fact that a single event can cause multiple problems; they assumed independence of risks that were in fact highly correlated. This is amazing to me, but oddly the exact same mistake seems to have been made by financial risk modelers.
I don't know why I'm surprised at this kind of stunning mistake. I guess at some level you assume that people capable of constructing and running a nuclear plant would also be capable of basic probabilistic reasoning; but; but it is never safe to assume competence, especially in the face of economic pressures.
[update: hm, here's a very detailed post by someone who sounds like he knows what he's talking about that says that basically things worked according to plan; despite some failures of some stages of containment and some safety procedures, there was enough backup to ensure that minimal radiation was released. OK.]