"Trust then verify" was Ronald Reagan's maxim for international arms control. A similar maxim can be applied to security architectures in cross-firewall XML projects: "Trust then validate".
Let's just hope for the new Gorbatsjov, shall we?
Trust comes first in XML security