https://blog.twitter.com/en_us/topics/company/2021/rml-polit...
If he has the resources I believe this would be a good option: https://en.wikipedia.org/wiki/SecureDrop