XOR is not really encryption at all, and you should assume it gives no protection whatsoever. FTP is not secure. SFTP (FTP over an SSL connection) is secure enough for business needs (i.e. it's as good as the encryption that commerce sites and bank sites use). There's probably and SFTP module for VB somewhere. Go with that.