Yeah I didn’t want to get into the weeds about inherently unsafe stuff, since the OP was about an XML parser