Security issue for sitemap SEO?

They typically name their sitemap something like sitemapRXTNAP.xml and submit it to Google using webmaster tools, rather than listing it in robots.txt