I missed using ENT_NOQUOTES since XML only needs & and <> to be replaced in tags, spotted by @mkuron
If the account display name contained special characters like & the mobileconfig would fail to import on the iOS device.