Is there a way to insert data into xenstore through XO when creating a VM?

I’m interested in inserting configuration (like Fedora CoreOS Ignition) or secrets (e.g. a vault token) into a VM.

Would xenstore be a “safe” place for secrets? It seems it is only accessible by the root user of the guest, so a good start. I assume it’s also properly isolated from other guests?