Samourai is a light client, you connect to their server, so they recieve your xpub. If you don't use Tor, which they ask at setup, they also have your IP address. There may be a possible issue with a way to screw yourself with toxic change if you do something wrong.
The company that owns Wasabi, ZkSnacks, definitely takes a portion of money and pays chainanalytics with it. Unfortunately, I can't support them because of this. They previously DEFINITELY had a toxic change thing, but looks like they fixed it. They did not handle the disclosure of this well, in my opinion. But too bad about the chainanalytics thing, because otherwise, the actual mixer... probably is harder to de-anonymize.
True the wars keep people reluctant to try either. If 100% used either product, chainanalytics would be screwed, even the one on the way in to Wasabi, lol.