It doesn't have to be illegal or fraudulent to reveal bad things about the company that the company doesn't allow its employees to reveal. Looking up various definitions of the term, the activity reported on doesn't necessarily have to be illegal. Though I acknowledge that in many cases the activity involved is illegal.