As with all assets served over the web to a browser client, there's really no way to protect the contents (save for DRM as found in videos, but that only works for videos). Eventually, the client needs to decode the json or binary payload in an unencrypted form. Since there's no way to prevent a user to pause the JavaScript VM and inspect its contents, there's no way to project assets.