@SOS99 - I change the owner to root so only the root user has write access as your application code should not be able to be changed by the user running the web server. I choose root as I have this account heavily locked down and only accessible via sudo so all commands are logged.
Thd larzvel documentation gives good high level setup requirements but would impractical or even impossible to document every possible setup and is assumed that you have sufficient webserver admin skills to be able to do this. There is also the option of laravel forge.
If you think the docs need further details you could always create a pull request on thd github repository