Codeigniter 4 security and best practices on live

It looks like they use cpanel, and I know that the document root for subdomains and addon domains can be set to the public folder of a project. I do recall a problem with the main domain - once its document root was set to public_html (for instance) I could not change it.

Have you asked their help desk about what you are tying to do?