I posted an update to my ColdFusion CF_Timer custom tag on my new myCFML blog with the same title. It has an allowedIPs option so that it can be safely integrated without displayed data to users that don't need to see it.
After I posted the initial CFTag back in 2022, a fix was requested on Adobe's tracker, CF-4214324 to "to decouple cftimer from admin debug output feature", but nothing has changed.
Check out the article on myCFML: