JavaScript is often delivered minified without the corresponding original sources. If preventing reverse engineering is a goal, it could even be obfuscated, which certain sites already do.

In practice, there's nothing that WebAssembly offers that could hinder analysis even further. If websites want to be transparent they could provide the sources (akin to providing unminified/unobfuscated JavaScript).