Currently the theme cookie is set via direct calls to Response.Cookies. Replace this with the tenant specific ICookieBuilder implementation introduced in Plato 2.0.0 to ensure theme cookies are isolated for each tenant.
This should be addressed for Plato 2.0.1.