We have shipped unikernels for the last decade. Zero sec issues so far. I highly recommend looking into the unikernel space for a docker alternative. MirageOS being a good start.
But the main benefit is the attack surface is greatly reduced when running a unikernel. Also we use way less resources and get really good perf.