Our static code analyser reports a security issue on unrestricted document types on a line that does XElement.Parse. The input for that method is the result of some API call.