Shared hosting is where an attack like this is most useful. Because you don't need remote code execution on a (virtual) machine. You just need to happen to be c

Shared hosting is where an attack like this is most useful. Because you don't need remote code execution on a (virtual) machine. You just need to happen to be colocated with it. For RCE on a laptop, server, phone, etc. You just need privilege escalation to get equivalent access, which tends to be easy.