Microsoft itself is leaning towards fewer app pools these days, rather than more - for performance & memory management reasons mostly. I concur, so am not planning to provide support for adding more. The current config should allow decent security isolation (i.e. services running under non-privileged "SP Services" account vs. those running as the "SP Farm" account, plus web app accounts).
Brian
Brian