I am not the only one, whirpool's shortcomings have been addressed before by others, both xpub exposure, lack of identity management, and key tagging vulnerabilities in signature management by the coordinator.

When I refer to sparrow it is using the whirpool function.