Consequences for the whistleblower should depend on the laws that were in place when (or if) they broke the law. For example, Edward Snowden probably committed treason and that carries a harsh penalty but it is good that he leaked the NSA classified docs.

Not sure what you mean by exposed, but I think the same logic applies. Those who suffered harm should get redress. Those who committed harm should be punished.