Yes. True. But many users leave Tor off and do not use their own dojo. Very much terrible for privacy.
If you #coinjoin with #whirpool: ONLY do it with own Dojo node connected and only with Tor ON.
Privacy focused people should use Joinmarket/JAM and stay away from that kind of flaws imo.