It is less secured than SOAP.

It prevents the user from passing structures and objects as arguments

It prevents the user from passing ByRef arguments