I am going through this link. My question is regarding Scenario 1 under recommendation as most of our SQL Servers run on physical machine
SQL Server runs on "bare metal" (no virtual machines)
AND no other untrusted application logic (application tier) is run on the same machine
AND no untrusted SQL Server extensibility interfaces are being used (see below for list).
What does it mean by untrusted application logic?
Does a webserver running on the same server with internally developed site constitute untrusted application logic?
What about a third party services that monitors the server?