The ability to reverse engineer the source through the browser doesn't make something qualify as open source anymore than reverse engineering a binary with some other tool.
I can view web requests but let's say on the 365th web request it sends my API key to an unknown location. How would I know if this was closed source?