I am not sure the example makes sense at all.

Default settings always not working for all apps.

If you need to tune network, if that's a tuning for all apps, development can be done inside net lib, all apps rebuilds and release, that's not more expensive than tuning a kernel config.

If you need to tune on per app basis, then unikernel is wildly safer because of the isolation.