In general, wouldn't it make sense to leak to the big newspapers directly (e.g. those listed on this site)?

Secure drop is not a middleman, each newspaper/org has its own instance.

this is how you do that, securely