I’m not sure this is true, considering the programs in the “leak” might themselves be illegal.
The problem with your position is it allows the following loop:
Government makes it illegal to report government crime, then government commits crime.
You can’t report the crime without breaking the law, so the government effectively is bound by no law. How do you break this cycle?
The only solution is to have it such that reporting a crime cannot itself be a crime, classification or otherwise.