It's not about who the coordinator is, it's about what the coordinator can do.

In Wasabi's implementations, users choose their own coinjoin rounds. A malicious coordinator would expose themselves by rejecting all other n-1 participants for the round (including other inputs owned by their target).

But in Whirlpool implementations, the coordinator chooses every user for the round. It is trivial for them to Sybil attack a target indefinitely with n-1 "participants", who each leak their xpubs or IP addresses, while extracting profit from every silently compromised user.