Both XML and pickle formats are not secure — if you open an XML or pickle file, you are essentially allowing the author of that file to execute code on your computer.

An XML file contains a list of data objects you use on a Web page or to transfer data from one database system to another. To open the XML file, you can use a third-party custom application for ...