Why wouldn’t you use a standard container based approach like Docker?
Sidenote: I'm not really looking to replace it, I was just asking out of curiosity since this is my first time hearing of unikernels
Yes. This is the fastest you can get.
If you want safer, add pr_set_seccomp _in addition_ to it. but that would be a custom solution.