Currently, it seems that when you create an SSH/SFTP account tied to a domain name, this account can view the entire server, including sensitive...
I am running the latest ISPconfig on Ubuntu 20.04 with PHP 7.4, NGINX and MariaDb (all installed using your tutorial...
Separate names with a comma.