Also, the coordinator can select their own remixed coins for free.
Exactly. So in order to Sybil attack Bob, the coordinator only needed to compromise the xpub address or IP address of Alice.
So, why not create Charlie, Dave and Eric, to make it seem as if many people are used as premixed inputs?
Why would the coordinator do that?