Should whistleblowers inside powerful organizations get legal protection to speak out, or is it safer to let those organizations handle complaints internally?