@LoudLemur It all depends on your role between the apps/websites and the Cloudron instance. The moment you are a service provider for your customer and, let's say, you are only responsible for the initial installation and onboarding (the rest is up to your customer), that is my definition of own from the customer's point of view. He is fully responsible for all costs and responsibilities (aka super user).
Separate is a perspective from a service provider's point of view. You are responsible for the infrastructure and because of the "high traffic website" (in my example) you decided that you need a separate / dedicated VPS because of bandwidth, RAM or CPU.
Shared in my definition is a viable decision between cost and app usage. Most VPSs are powerful enough to run a lot of websites with low traffic. And if Cloudron's user/group management is appropriate for your use case, shared infrastructure is good for the cost and the environment.