Hmm...
Yes, you're right - that's the way we schedule task in VCD 5.1. "/ru SYSTEM" (which means "NT Authority/System") is currently hard-coded. That's why Tools Service's account is not applied for post-customization.
However, as you pointed out, it could be that something gets screwed when we spawn "cmd /c script.bat". We schedule customize-guest.exe instead of script because of some weird caveat - even though we provide /z and /v1 as documentation says, the task doesn't get deleted. Which means it will execute again after each next reboot. So, we have to delete it ourselves once the script is executed from customize-guest.exe.
I'll check process management code. Maybe I can find something there.
/Andrii