I hate XML. It's so easy to make yet so painful to parse and read. Because of this everyone makes it and wants to send you things in. They do not realize of course that you have to parse it for it to be of any value. Or maybe they realize it and they just don't care. I'd rather see a standardized set of variables used for things that could be easily passed from one site to another. The fundamental problem with this is that people would spend their time hacking it until no data was safe.
Then again, what data is safe? If you visit my site I can capture practically anything I want from you. It's too bad there's not a site that lists "safe" sites and "unsafe" sites depending on the amount of spam they sent out or other mean things they did. With server-side code though it's impossible to verify that things aren't being capture and you'd be stuck monitoring these things based on your best guesses and if they set long-expire cookies. Ok, it's a dumb idea.