&gt; 2. Sneaky stuff I really don&#x27;t want the user to be able to read.<p>The user is already going to have a hard time reading the unuglified JS. If they are looking for &quot;phoning home&quot; they have to search for WebSocket sends and ajax calls. Both of those will have well defined APIs that will be just as easy to spot in dissembled webasm as they are in unuglified JS. I bet they&#x27;ll be even easier to spot.