It should do a decent job, you’ll end up with a binary for running the model itself along with binary weights to load. Assuming you strip out any debug info then they’d have to understand the model based on machine code.