The reason for securing the filesystem is that sites hosted on Ensim Pro should not be able to write anywhere outside their domain FST.

The users of the given domain are sand-boxed in their domains.

Each domain gets its own file system that is isolated from other domain’s file systems using NTFS permissions.

This way, scripts running on a site will not be able to write anywhere except the domain FST, nor will it disturb any other products installed on the machine.