I think he brushes by the security argument too quickly. Unikernels are (typically) smaller with less attack surface and more importantly it&#x27;s easier to reason about them. I&#x27;d argue that this ability to keep more of the entire OS in your head at any given time improves security on a high level of abstraction.