How to remove the containing "response" tag from GET output
Rest plugins always use the standard seralization methods, you can't really influence that for just your plugin. You could implement your own, like ?_format=my_fancy_xml.

Or, if you have very specific needs an an existing client that you need to work with, you can always just implement a normal controller and build the XML yourself and return it with a normal Response object.