Whether or the allegations made by the Guardian and Washington Post turn out to be true remains to be seen. It does raise a question about where to draw the line about whistle blowing versus the law versus security.
I tried to find that fine line in an article for The Converstion which can be read here.