I think the poster&#x27;s point is that a unikernel may have an overall lower attack surface, but it now has a different, unique attack surface.<p>That seems like it might be a legitimate concern.<p>There&#x27;s also support considerations to taken into account as well from a vendor perspective.