You can move the www directory to /home/www, update your Apache config file, and restart Apache. I don't see any reason to make the web root a user's userdir just to put it under /home.

This week, the Apache Software Foundation has patched a severe vulnerability in the Apache (httpd) web server project that ... www-data)," Fol said. But any directory traversal or remote code ...