Im not sure, if is really intended behaviour on shared hoting env..
Hestiacp > Domain > Additional FTP account(s)
#1 Path : /public_html/XDir > Correct
#2 Path : /XDir > Should not be
But, if i put as #2 path, it creating that ‘XDir’ folder out of ‘Public_html’ for FTP access.This seems dangerous. FTP accounts supposed to be allowed inside ‘Public_html’ only.