We use CF's scheduled task capability for regularly-scheduled (daily, weekly, monthly) processing, and all scheduled tasks still run within the application/security framework. High-volume tasks (e.g., processing relatively large user-uploaded files) are performed within the regular application framework and we work to optimize performance on both the application and database layers so those can occur within the normal web request/response cycle to provide feedback to the user. In the rare situations where we have to deal with larger data imports (e.g., more than a few hundred-thousands of records) which just aren't feasible through the web application, for example, we deal with those offline at the database level.