[DPG] Bandit ci check reporting issue in the _deserialize_xml method

[catalinaperalta]

The bandit check in ci reported an issue with the deserialize_xml method that we ship as part of the _model_base.py file. We should fix this asap:

Bandit reported issue:
https://dev.azure.com/azure-sdk/public/_build/results?buildId=4120920&view=logs&j=b70e5e73-bbb6-5567-0939-8415943fadb9&t=f3c2469e-6935-5949-b282-5aba94ff7e0d&l=653

Generated code with the issue:
https://github.com/Azure/azure-sdk-for-python/blob/d43e14e708bec677daa6d757ae2360e561c93a8d/sdk/healthinsights/azure-healthinsights-radiologyinsights/azure/healthinsights/radiologyinsights/_model_base.py#L1129-L1134

cc @iscai-msft @msyyc

[catalinaperalta]

This is blocking a Health Insights PR from getting merged in, we'd appreciate a fix that would unblock their PR. Could the emitter revert this change meanwhile we find a better design for this method?

[msyyc]

fix PR #2829