A Sybil attack becomes much easier to execute if the coordinator is malicious. They could simply accept a small number of coins for the round and replace the rest with coins controlled by chain analysis. This would undermine the reliability of the anonymity set.

And this becomes exponentially more effective when there sits little liquidity in the coordinator. This is why I have claimed in the past that the protocol is not entirely trustless.