This wouldn't be a DDOS attack. Everyone else's vtxo is locked into the sharedUTXO which is being paid to the ASP until the 4 week timeout.

When the remaining members of the shared UTXO come back online at the 4 week mark, the ASP pushes them into the next coinjoin round to create another sharedUTXO with other people who are entering in that round.