“Balances the negative revelation of multiple safety failures against the constructive step of implementing a disclosure protocol.”