I worked on a whistleblower software. Based on the regulations we had to develop for your friend should be able to submit their whistleblower information and still be employed without the employer knowing who submitted the information

There’s strong whistleblower protections in the EU