That&#x27;s because his argument is orthogonal to the performance and security arguments. His argument is basically <i>even if unikernels are faster and even if they are just as secure, they are still operationally broken because you cannot debug them</i>.<p>He doesn&#x27;t need to present a great argument against security or performance. There doesn&#x27;t even need to be such an argument. If you&#x27;ve ever spent six months trying to find out why a content management system blows up under the strangest of conditions, even when you have a full debug stack, you understand why that argument may be able to stand alone.<p>The place where his argument falls down, IMO, is, like others have said, in assuming that everything is binary: everything is unikernel or it is not. And that&#x27;s just silly.