You'd build language-specific unikernels, like MirageOS. No point carting a whole operating system around to run one process as one user.