Op seems to misunderstand the following:<p>1. Your hypervisor is the security boundary. 
2. Unikernel design lets you maximize the security benefits of AppSec and LangSec by removing the large OS surface area.