> Whose security boundary is also the kernel. It's not that much different.

That's the whole point: If you have to chroot/container everything because it violates regular permission models too much, PHP is not multi-tenant capable by itself.