Comment by fwip

This is also why I'm not sure the unikernel buys you much security. If you corrupt arbitrary memory, you can execute arbitrary machine code. Doesn't matter what the unikernel exposes.