“Shared hosting providers” These haven’t been a thing since VMs … basically for this reason. There’s always a local privilege exploit.