How do they determine whether something is a CoinJoin or not? They don't exclude all transactions with multiple inputs and multiple outputs, or do they? 

https://jamdocs.org/privacy/01-fundamentals/