This feels like more of a bandaid for security issues in untouchable production codebases than a new product consideration. If I wanted to do something like th

This feels like more of a bandaid for security issues in untouchable production codebases than a new product consideration. If I wanted to do something like the proposed use case, I would just do it on the application server directly. CF doesn't have any magic beyond scale of operations (i.e. DDOS scare language). You can use exactly the same techniques they are using and will probably find it far less complex to achieve the same effective outcome.