To me, it sounds right on target.
All of the defense contractors are corporations. That does not mean it is legal to "leak anything they want", especially if the information is classified..
Not true. Laws against leaking classified info apply to private citizens as well as government employees. Also to get the job in the first place Rand Corp would have had to sign non-disclosure agreements.