Indeed, the UTXO commitment needs to be sent after funding_signed. Conceptually, the UTXO commitment is a temporary replacement for the funding transaction. I will amend the paper and upload a new version. Thanks for pointing this out!
Edit: new version uploaded. Old versions are available in the gist history. LSP Fraud Proofs · GitHub