I somewhat fail to see what's insecure about the Agent XPs. If the auditor's don't like that, did they pass Windows Scheduled Tasks? Is that more secure somehow?

I'd ask them what they recommend. They must have passed someone as secure that schedules tasks.