I'm curious... I love the asynchronous calls with jQuery, but I don't want my components available to the public by view source...
What is the recommended solution for this?
You could make a facade accessible in the webroot that simply passes all inputs to a CFC outside the webroot and returns the results.
That way all that's visible via a direct call to the cfc in the webroot are function and variable names, and all the business logic is out of sight.