It wouldn't really protect you from XSS attacks, it would just make them a bit harder, not something we'd want to rely on.