There are several groups out there that train journalists (and others) about digital security.

https://freedom.press/digisec/

https://tcij.org/initiative/journalist-security-training/

https://ssd.eff.org/playlist/journalist-move

People train to become journalists, wouldn't these practices be part of the curriculum?