Chris, on the cf_scripts mapping issue you're certainly right to question things, and I'd raised that (and your next point) in
my blog post on the update today .
I pointed out further that it's not only confusing about the CF2023 and CF2021 update technotes from today (since both have no mention of a zip--which is its own issue) , but I also found today that the same confusing verbiage is in the update technotes for CF2021 update 2-6. I don't recall seeing it before, but could have missed it.
My take is that it's trying to talk to people who might somehow have copied their cf_scripts folder to somewhere OUTSIDE of the cfusion/wwwroot, but that's no longer recommended at all (nor necessary, specifically BECAUSE the wsconfig tool creates that virtual directory/alias).