Are you saying a cron job cannot be used to run a malicious script? If I can run a cron job as root, I'm a god of that machine. I could do all I want and cover my tracks very well. A cron job can be used to call a batch file that can do anything that the user is allowed to do.