All users should have a home directory unique to themselves. Shared directories can make it easy for one user to break into another's account--using trojan or other measures.