User / App Isolation?

I’ve been a lurker for years on EE and implemented it at one point point for a short time and was impressed.

I was wondering in this time if any app / user isolation has been setup so that when running multiple wp installs on a single droplet they are all safe from spreading vulnerabilities or hack risks.