Let's say you put the bulk of site above public root folder, and the only thing that's being served client-side is css files, javascript files and images and only one index file that allows the site to show up and tells browser to look for the rest of the sites pages above the public_html...