The article seems to be implying that it's more policy change, such as the case of Thomas A. Drake they use as an example. Additionally, they shouldn't need to use the espionage act for basic leaks. I would imagine other laws should suffice (though I don't know the particulars of which)