XML is too complex, and a compliant parser acquires a swathe of security issues: http://t.co/zX7ByGbmqo