It does mean other tasks (e.g. serving pages to visitors) can still be run at the same time as the CPU-intensive task though, like most languages do when it comes to hashing passwords and logging people in

Correct, but it sure does stop your entire single-threaded process from blocking to the detriment of all other requests.