XXE was a terrible idea from the beginning.

Anybody who writes an XML parser that enables XXE by default should be banned from ever writing code again.