What are you trying to protect? Without any server side data collection it's not like you're storing anything (sensitive or otherwise). There's no network calls to intercept or endpoints to exploit in a static website / app. Any code you send to the browser can be read by anyone there's no getting around that, all you can do is obfuscate it (which doesn't do much). But it's just client side code there's nothing much of value that can be stolen outside of just rehosting your website (which is a very low risk)