Presuming we can verify this story, it's a fascinating chain of custody...

But therein lies the issue; we can't verify the source, so this is at worst apocryphal and at best an unsubstantiated list of events.

So only 3 people have the archive? That makes it easy for the NSA and others: take out their copies and then start seeding doubt that it ever was a thing. No proof will be left behind.

This many years later I think the damage from publishing unredacted complete leaks is way better than letting journalists or governments handle transparency.