Newbie here. So is proof-of-burn still how people are buying these? Or should I buy through Poloniex?

The burn was IPO buy-in. All 2.6 million xcp have been redeemed for burnt bitcoin, you now need to buy either the built in dex or poloniex.com or bter.com