Going to NSA IG or the PSCI's in Congress are protected (the whole point of NSA IG is internal malfeasance, it's not just for stealing cafeteria trays...). The problem is that route of reporting may be ineffective, and once you start, you'll lose all future access, come under suspicion, and may actually still be charged (the whistleblower stuff helps more with not getting convicted).

I was originally thinking "he should have gone to IG/Congress rather than the press", but seeing the Binney/Drake/Wiebe interview where they all had gone through the IG/Congress process themselves, recognized they'd accomplished fuck-all, and supported Snowden's decision to go directly to the press/public, kind of convinced me.

I personally might have considered going to someone else in government, other than IG or H/SPSCI -- like to Udall or Rand Paul or maybe even a judge or governor -- as more effective than the "official" channels, but less illegal than a journalist.