That is true. Many kinds of reporting requirements are only triggered for companies larger than a certain size, so perhaps that would be beneficial here as well to maintain anonymity.
That covers half of it. Even in a fairly large company you can still have niche roles that could allow someone to de-anonymize the data. The group size wouldn't be 10k employees, just the 5 people you have in, for example, your legal department.