It looks like the server certificate of Unbound uses "unbound" as its hostname. I'm not sure whether that's always the case, but for now, let's assume it is.
This exporter does not call into the Unbound command line utility, as that tool only acts as a very light-weight shim around invoking an RPC over TLS.