Current understanding is there’s a risk they could know who the other utxos in a mix belong to because people use their node, so it introduces a similar problem like wasabi has if not reaaaaaally knowing how many rounds of mixing is enough to truly guarantee privacy even from them. #[2]
Also, not super clear to me what risks are introduced by whirlpool coordinator being centralized and/or how they plan to address it with the decentralized things being built, they don’t seem too good at/interested in explaining things to non dev types.
https://twitter.com/SamouraiDev/status/1647250191999746048?s=20