Years ago, I setup my server's php-fpm inside a chroot, just to be extra safe. Many blog posts from the time said they either do not bother or use containers instead. I'm wondering if php2shell changes things, especially since AI might find other security holes.

What do you use in a post-php2shell world? containers? chroot? something else? And why?

Also, let me know if you're interested in how I set mine up.