> I don't understand. Isn't that a case where "allowed by law"?

If you mean an NDA that says “you agree not to disclose any of our secrets unless required by law” which would clear you if questioned in court or by police etc. I think the SEC see that language as trying to stop employees/whistleblowers going to the SEC with concerns (which people aren't 'required' to do)