Hello everyone, thank you very much for your hints and answers!
In the end, it was relatively easy to solve,
https://support.plesk.com/hc/en-us/articles/12377109859735-SFTP-does-not-restrict-user-to-the-subscription-s-directory
Restrict the ability to follow symbolic links, ss enabled for all...