You can still obfuscate JS heavily and make a VM that executes also obfuscated code calling arbitrary browser APIs. At least In WASM everything is sandboxed so the attack surface is smaller.

cf. Kagi is a good take

Remember: It is a company that keep saying how much production code can be written by AI in xx years, but at the same time recruiting new engineers.

The "source" link at the footer seems to point to the author's GitHub profile, not source repository. The repo under it contains no code either.