Aren’t NDAs unenforceable against illegal conduct anyway?

Yes, absolutely. You can’t sue someone for violating an NDA if they did so to report a crime.

But a lot of people are morons that don’t understand how the law works.