The first board I got also got hot; I had to have it replaced because the USB current consumption was about 300mA.
Is it the XIAO that gets hot or the expansion board? In my case, it was the IC on the expansion board side, located directly below the XIAO.
Will Blink.ino for example work properly if XIAO is not attached to the expansion board?