You have to trust their promise that their anonymous submission process is actually reasonably anonymous. Many whistleblowers probably couldn't tell between an anonymous process and a seemingly anonymous process that isn't.
Right. But in this case trusting WSJ to keep your anonymous submission secure as well as trusting their ability to run a leaks site would be a mistake: