Isn't it just the same as a javascript encoder - or similar - it doesn't really encrypt anything, just obfusticates variable and function names?

Nothing is truly secure these days!