Should we just use the same user provider for all apps even if these apps should not sharing login session (Let's say all these apps require the same login method: email & password)? Or is it always better to separate the user provider based on the login session requirement?

And if we really need a new user provider, is there any case where it is better to create a new module from scratch rather than cloning the Users (System) module?