It's generally a nad idea to put xml in strings, but when returned from a webservice... there is a special place in hell reserved for that developer, sorry CRM guys.
Matt Powel's Rant, part 2, part 3 and part 4.