> PHP was never multi-tenant safe

You're running on the same host, so there might be exploits that allow you to break free, but that goes for most other "serverless" solutions too.