NodeJS PKG How to exclude source code from being included in plain text

For various reason, including protecting my source code and just a right click to execute instead of installing node, npm ci, etc... I would like to package my nodejs app into an executable.

From my research I found

• nexe
• pkg

I'm trying to use pkg because it felt easier to use after a first look at it. But on a sandbox project to test his capabilities, I came across an issue.

Considering :

// /src/module.js
function bar(str) {
  let tic = "another sensitive place";
  console.log(str);
}

function foo() {
  if (true) {
    return "some really important business are done and the how should";
  }
}

module.exports = {
  bar,
  foo,
};

// index.js
const mod = require("./src/module.js");
mod.bar(mod.foo());

And the pkg configuration in package.json

{
  // many lines ommited
  "bin": "index.js",
  "pkg": {
    "scripts": [
      "src/module.js",
      "index.js"
    ],
    "targets": [
      "node16-win-x64"
    ],
    "outputPath": "bin/"
  },
  // many more lines ommited
}

When opening the .exe file generated in ./bin directory by the command pkg ., I can find my code in plain text. Why ? How to make pkg only include the bytecode ? And yes, I'm aware of string being plain text even in bytecode, but at least the logic around is protected.

Screenshot of /bin/index.exe clear code in generated executable