Having done all that and checked everything, the browser is still getting exactly the same responses as before.
Suexec was enabled so I disabled it. There's a tip to run /etc/init.d/apache2 force-reload to fully disable. but if temporarily disabling doesn't achieve anything is there any point?
Apache2 restarted without any error messages at all.