> Now, I guess, we just need to learn how to properly isolate simple binaries. I think unikernels are appealing as a solution. Every program is "the operating

> Now, I guess, we just need to learn how to properly isolate simple binaries. I think unikernels are appealing as a solution. Every program is "the operating system" running in something like Firecracker on a baremetal host.