As @fanoush says - you can lock down the device in a few ways, but I'd suggest ensuring minification is turned on for production as not only will the code run a bit quicker, but the minified version of it will be much harder for anyone to do anything with even if they can get it off.
You could also run your code through a third party obfuscator first if you really want.
Espruino is a JavaScript interpreter for low-power Microcontrollers. This site is both a support community for Espruino and a place to share what you are working on.
As @fanoush says - you can lock down the device in a few ways, but I'd suggest ensuring minification is turned on for production as not only will the code run a bit quicker, but the minified version of it will be much harder for anyone to do anything with even if they can get it off.
You could also run your code through a third party obfuscator first if you really want.