i've always thought this is collecting pennies in front of a steam roller: you save 50% only to go out of business when a black swan hits and you can't debug an issue in production in any way. i guess this changed?
There are many ways to debug unikernels in production, particularly, we have in-kernel monitoring (e.g. ability to enable fine-grain memory, scheduling, and resource monitors. These work also any included libraries). You can also produce flame-graphs of the entire unikernel image which show the entire kernel stack and the application. There is also remote GDB support (which come with additional scripting tools for automation) for debug-images which are built along-side the production image.