‘National security cannot justify the use of spyware on journalists’