Yep, anyone who uses MSN Messenger 7 can see the personal message.
Getting rid of the Xfire requirement is technically possible, but since I'd have to manually enter in the name of every supported game (and the proper way to detect it), it wouldn't be worth the effort. Might as well let the Xfire developers do that for me
.