I think that, all things considered, this is the best possible outcome (realistically). There was no way he'd walk, because he did break laws. In this instance those laws were broken to get information out to the public, but one can easily imagine when those laws could be broken for more malicious purposes. If you leave this unpunished, they might think this opens up the floodgates. The powers that be would most likely prefer to deter 100 whistleblowers if it means stopping the one person who'd use the information for terrible ends.