With no segregation, you crack one service you get access to all 25 services and their data.
With segregation, you crack one service you get access to just that container/physical service.
With segregation, you crack one service you get access to just that container/physical service.
Install Ubuntu, Postgres+apache2, then su to www-data and try read some data from the postgres data directory to see what I mean.