You're putting too much faith in NDAs. All it takes is one disgruntled employee with a sense of ethics.

Also, evidence doesn't have to be externally visible. In a lawsuit discovery will dig through design docs, server logs, emails, chats, everything.