XML alone is not secure at all. If security means only "who can access to that data" I think you need to work in a new layer. Data access can be restricted and controlled by a private network, systems like service bus, etc. May be encryption can be other topic of XML and security.