IanBruk -
XML files are just ordinary text files, so unless they're protected by the operating system, or encrypted, anyone can read or change them. You should protect them like any other business document that you don't people to see or touch.
Chip H.