> Are there unsafe blocks in the bootable unikernel?

Probably. If that bothers you you can also run it on Lambda or something and let amazon worry about booting.