Not to mention the further stigmatization that results from being a whistleblower- having your name in published sources associated with calling out an employer may impact how quickly you can find a new job. Future employers also like seeing $LARGE_CORP experience on a resume, where I've seen colleagues stay at a job they didn't like only for the prestige attached to this line item.

For a worker without this safety net there really isn't reason for them to violate an NDA and have to rely on whistleblower protections for future remidial damages if there isn't a guarantee that their current living situation would be able to be maintained. We saw last week how Apple fired leakers on the spot and have their name blacklisted towards future tech employers as such.