As far as I understand how this works, you won't be able to know Bob's source address after he had mixed his coins because the coins will be scattered around numerous newly generated addresses. So the attack vector displayed in your picture is invalid.