POSIX is a minimum standard for commands and APIs so that programs can be written that will correctly run on on a POSIX compliant system.
POSIX says what your system MUST have, it doesn't say anything about what other things can be added to it.
A program doesn't need to be mentioned in POSIX for it to run on a POSIX system. For a random program (not mentioned in POSIX), it is posix compliant if it uses POSIX APIs to run.
If POSIX doesn't mention the "xz" compression method, then there IS NOT a "posix utility" to handle that file format. There is nothing wrong with using the existing xz and unxz tools and it is pretty much your only option.