A lot of questions on how they came up with that number.
What kind of transaction is flagged "illicit?" Are they to/from known DNM/Theft addresses?
Given this UTXO flow :
Is that two illicit transactions or one? How many post-coinjoin transactions are illicit?