In my vps I have different cpanel passwords for every site and I do not use WP multisite. If one site gets attacked it won't the affect others unless the vps installation comes attacked as a whole or somehow gets unsecure because of an attack.
__________________
|