I like giving XML shit as much as the next guy, but at least it supports streaming schema validation. With most (all?) JSON schema implementations, you're forced to load it all into memory. Fun times when you get a >300MiB SBOM.