You do need to keep tabs on whether they are or not, that is true - and you will have a bit of management to do if they are under constant heavy write load. For me, this all works out because I don't have too many tenants - and I have tools to block writes when running migrations.
Postgres row level access control gives all the benefits of strong isolation with none of the pain of schemas getting out of sync.