> The phrasing "HR isn't there to protect you, it's there to protect the company" applies more here.

I agree (although had interpreted the statement originally differently). Unfortunately, the part about "XYZ isn't there to protect you" applies to so much in life. Even police don't have a responsibility to you protect you (but just the public as a whole). The lesson from stuff like this is often to make sure your best interest are aligned with the most powerful and active stakeholder in the "room".