They didn’t. They said they work at an infectious disease lab. That’s plausibly deniable enough.

Dudes at Lockheed Martin can probably say ‘I work at Lockheed Martin’ without breaking NDA, but could very likely just say ‘I work at an Aeronautics Engineering Company’ to stay more obscure about it. That second example is at about the same level of detail as the ‘infectious disease lab’.