Point raised in the TFA is that one process unikernal has a much smaller attack surface than a linux instance running the process would have.