I process forms all the time just by calling params and url_params, which I doubt come from CGI (or do they?).

Yes, they do. :-)

So yes, you should continue to use CGI.pm, until such time as you have an active (and demonstrable) need not to.