You don't know what code they run on their servers, the only way to mitigate this is to run your own coordinator, joinmarket or joinstr are the right solutions.
Discussion
Wrong again joinstr is not zerolink
Plus Samourai code is open source and majority run their own dojo