The British government's proposed new legacy laws give it "maximum control" over public disclosure of sensitive information and that should be changed, according to a new report.