Hi,
what you see here in the editor is a dynamically rebuild xml, not the source xml itself.
That rebuilding works via the normal 'get' interface.
But I understand that some people didn't want that too. In newer versions there will be an additional setting in the krpano Protect to allow ONLY privately encrypted xml and plugins files. Together with the disabled external parameters and disabled Javascript-interface, there will be no way to the runtime data.
Best regards,
Klaus