XML is just so much hassle to parse securely, and it is extremely difficult to get right.