This is also why I'm not sure the unikernel buys you much security. If you corrupt arbitrary memory, you can execute arbitrary machine code. Doesn't matter what the unikernel exposes.
In general, sure. MirageOS is in OCaml though, where you have a memory-safe language with a small C runtime. Corrupting arbitrary memory is much less likely.