Comment # 7 on bug 1227215 from Marcus Rückert

unless you use suexec the mpm used by apache doesnt really matter it will run
under wwwrun:www no matter which mpm. and i am not sure we will be able to kill
mod_php any time soon. one could argue we should migrate everything to use
php-fpm but I am not sure everyone will be happy about it.

in my personal setup i have php-fpm + nginx. each php app has its own
user/group, apparmor scope and strict permissions for its diretories. oh and
every app has its own session directory. see home:darix:apps/nextcloud or
tt-rss or roundcubemail for examples.