Ratified international treaties are the supreme law of the land in the US, and the whistleblower protection stuff being invoked is claimed to be from retaliation to a crime allegation.

I mean if you phrase it like that.

However, the articles phrasing is employee used work resources to notify colleges that their work may causing legal risk for the business. Which uh seems pretty fine?

But also, the laws of a country Trump whatever policies your company has.

It was Google's own code of ethics that stated that they had a ban on building AI weapons. They dropped it:

https://www.bbc.com/news/articles/cy081nqx2zjo

It was Google who claimed to be something and ultimately rug pulled a very important promise.