So, I have a couple of things to say about this. First, 99.9% of players wouldn't consider stealing your ideas in the first place.
its easy to say: Oh it is only so few... but that doesn't take away that I have systems I worked on for years, which I don't want each and everyone to be able to see. It only takes 1 thief to make all my work worthless. Only 1.
And in Dutch we have a saying: Preventing is better than curing.
Your concern is with the 0.1% that does.
Second, you do not need to be a hacker at all. I just tried it on a few random itch.io browser games, and could access both their JS as well as their JSON data with surprising ease. And last time I checked I do not have "hacker" in my resume.
If you downloaded browser games without permission, then you're already in the wrong. Even if you just do it to proof me wrong. That's piracy.
I don't want to be rude, but downloaded games are way easier to rip then browser games. Also I would know something is wrong, because I would see my game is downloaded while that shouldn't be possible.
Note: this is not my advice in security. This is personal experience and for me a huge reason to choose HTML.
If there is sensitive data handling, I would prefer HTML5, as it offers more security. (for example micro transactions or logins)
For anything else, downloadable would be the best thing, because once deployed there is no maintenance.
Edit (after reading above post) :
Online deployment offers much more security, but only on a server you own.
Itch is not really designed to secure anything
For anything else, downloadable would be the best thing, because once deployed there is no maintenance.
Edit (after reading above post) :
Online deployment offers much more security, but only on a server you own.
Itch is not really designed to secure anything
Opening a downloaded game in RPG maker is easy. Much easier then downloading browser based games.