From any Whirpool Tx0 you can get the unmixed changes from users and trace them, it doesn't matter if these changes are in the initial Tx0 or not, the blockchain is there. It is a marketing deception and lack of understanding of how a coinjoin works by its users.

It is also a marketing deception to pay fees to the coordinator to avoid a Sybil attack, it is simply more expensive for the common mortals but not for any spy agency. Moreover, in Whirpool's case, the attacker will only have to pay once for each group of trackers introduced into the system indefinitely.

It also adds that some of its users are de-anonymized because they give up their xpub and even their ip if they do not enable tor.

It is also a marketing deception to pay fees to the coordinator to prevent a Sybil attack, it is simply more expensive for the common mortals but not for any spy agency. Moreover, in Whirpool's case, the attacker will only have to pay once for each group of trackers introduced into the system indefinitely.

Add also that part of their users are de-anonymized because they give up their xpub and even their ip if they don't enable tor.

I am very impressed by the lack of compression of their ninja users, obviously the mixed coins are mixed as in the other coinjoin implementations, neither more nor less, with its advantages and disadvantages. For example in joinmarket if you understand and use correctly the Mixdepths you forget the toxic change as this will end up being mixed and therefore at some point will be lost track, just use coins from the last Mixdepths, and when you pay use the collaborative sending, with which the remaining change of your mixed coins will also be difficult to track as it will be along with the change of the other participants, with these two tips you have all the premix and postmix tools you need but without toxic marketing.