It’s much easier to just ship a WASM blob that renders to canvas. You can throw in a bit of obfuscation (LLVM can do that).

But even without WASM, there is the “tiktok strategy”, of pushing bytecode to a self-made interpreter, that frequently changes its semantics.