I am suggesting that ensuring each service runs on its own separate directory via chroot() would be enough for the secur

[answerhappygod]

I am suggesting that ensuring each service runs on its own
separate directory via chroot() would be enough for the security of
OKWS since chroot guarantees the isolation of the processes by
preventing them from accessing each other’s files. Thus there is no
need to set different UIDs for each service. Explain why this
approach is not true