Super stupid question, but this must have some kind of authentication, right? Where is that part?
You would need to upload that XML to a bank to actually process the transaction.
There are other formats like NACHA (US only), where you have to generate a text file with a pretty specific format, and upload that, often via sFTP to the Bank's server to process.
https://docs.iso20022js.com/quickstart#step-4-send-the-payme...