As far as I know this has always been the case. There's no authentication with APC (as opposed to, say, MySQL), so no way to securely segregate the data. This is one reason why these tools aren't typically installed on shared hosting.
If you control the server and all the vhosts on it, you've already solved the problem by adding a cache prefix.