How YunoHost Isolates Applications: System Users, Subdomains, and Where the Boundaries Actually Sit
YunoHost isolates apps with one Unix user and one subdomain each. This note maps where that boundary is real, where it is weak, and how to verify it with ordinary Linux tools.