Is this below saying the kernel context executes within the container? A Hypervisor being communicated to via each container is a security nightmare. The idea is to isolate the container so it can't make any type of hypervisor calls by not making the HV API available to the running container.

"Unikernels consist of a specialized, single-address-space machine image constructed using only a modular stack of libraries required to run an application. That approach allows a secure, fixed-purpose image to run directly on a hypervisor or bare-metal hardware without an operating system such as Linux or Windows. "