Do they have to coinjoin everything that comes in?
It would be good if they did, because improving your privacy helps everyone. And coinjoining is easy with tools like Wasabi.
If he's accepting funds via Lightning there's pretty much no issue at all. Lightning doesn't have a clear on-chain trail beyond those you have directly opened a channel to.