pull down to refresh

The light client mobile wallet idea sounds good in theory but how do you keep it trustless? Someone has to coordinate the joins and on mobile you cant run a full node to verify everything yourself. How are you thinking about making sure the coordinator can't link inputs to outputs or log participants? Because that's usually where the tradeoff between usability and privacy gets made.