A simplistic explanation would be that Segwit isolates transaction witness data; only the actual transaction data is counted towards the original 1MB limit, so 1MB + witness data could result in blocks bigger than 1MB. The "true" block size limit is now 4MB including witness data.