Without blockchain surveillance firms and their arbitrary lists of "illegal" addresses and UTXOs, a CoinJoin coordinator won't know which inputs are worth reporting and selling. Without a CoinJoin coordinator that acts as a big honeypot for "criminals", blockchain surveillance firms won't know which "clean" inputs have a connection to "dirty" ones. It is a mutually beneficial collaboration in which both parties [can] make a profit by selling users' data to governments or whoever else pays more. However, the problem is that inputs are just half of a transaction, neither coordinators nor blockchain analysis firms can map inputs with outputs unless malicious developers introduce some vulnerabilities or backdoors into the protocol which will weaken the coinjoin process and make links between inputs and outputs less non-deterministic.