Using Xprivacy probably means you're giving up a significant portion of your security for increased privacy. When you are rooted and your bootloader is unlocked you're more exposed to hacking and malware. Also, last I heard the most popular root application by far (SuperSU) was silently acquired by a Chinese company.

I'm not saying you shouldn't use Xprivacy or other root-enabled apps, though, as some are very useful and it may be the only way to get Google to build in some of those features eventually, but just be aware of the trade-off you're making.