And even if that's not the case, using Tor and not linking your online vigilante identity to your real identity (e.g. by having your whistleblower twitter account linked to your personal phone) is a very basic precaution.
I REALLY don't want to sound insensitive, but if people are going to use technology to fight people who wield the power of physical violence, they DO need to learn how to apply it properly.
This flies completely contrary to precautionary measures and utilizing knowledge/education as a barrier to attack. The sooner society gets away from the "that's 'victim-blaming'" mentality and embraces education for all, the sooner everyone is better of for it. It's not saying, "yeah, they had this coming, this is their fault" but rather, "let's analyze the situation and provide mitigation for the future"
Then try to use less insensitive language. "It amazes me that people don't take these basic precautions" sounds an awful lot like "Look at this poor misguided savage, killed because she was too stupid to know what an Onion Router is." Maybe try something like "We need to educate whistleblowers about security technology to avoid tragedies like this."