He addresses the hypervisor as security boundary and explains not only how it sometimes fails it it&#x27;s intended job and why it&#x27;s insufficient by design.<p>Further unikernels don&#x27;t remove the large OS surface area they replace it with something that may or may not be larger and safer.