Let me guess - the XML was sent over a SOAP web service that looked pretty much like:

   string DoStuff(string arg)

Where the service call takes a string that actually contains XML and returns a string that actually contains XML....

My own "Worst use of XML" was someone wanting to use quite complex XML documents as a key in a database....