It’s good practice to have the system folder above document root, but does it make sense to have MSM site folders on top of document root?
In my sandbox, I have a domain that acts as a hub of sorts for publishing to a few sites with the system folder above root. The add-on domain folders for the MSM sites are currently lodged within public_html folder — exposed. They all have their own independent domains, so I suppose my question is, what is the best practice in this scenario?