Is it safe to store user login details in XML files outside document root

Question

I have a section of my website that requires users to register and login, and their login details are stored in separate XML files in a folder outside the public document ro