Doesn't really mean anything, the session files are likely created by apache and just isn't configured to change the owner to their user id; is actually pretty common, and shouldn't be an issue.
The only issue would be that it could make it so their ftp user couldn't delete the files created by the webserver; but fit the sake of argument we just assume the site management user can edit these files (generally the user would be in the webserver group).
