A wordpress network is exactly what you are looking for if no one needs FTP access.
The only way to truly separate user info (high paranoia mode) is to have each site on a different server. Otherwise whatever information leakage that might be should be easily solvable with something that will let some of the user settings to be local to a subdomain.