When creating a wallet on Samourai, you are *encouraged* to connect to your own node first. If you do that, they will *never* have your xpub.

The whirlpool coordinator does not take an xpub, that’s just the backing server to Samourai wallet that does. Which is why you should use your own.

The coordinator is blinded and only knows of the individual UTXOS that are being published as available to mix, and by default samourai wallet changes Tor identities after each UTXO that is mixed, so that even IP addresses aren’t linked.

My recommendation is to always run your own node so you don’t have to trust anyone, that includes samourai.