In general people can download all the files needed to run the WASM app from your webpage and host them somewhere else - if that's what you're afraid of. To prevent this you need to put the important parts into some server backend and behind some sort of authentication.
For instance in the context of a web game, think of the game client as a "dumb client" that isn't useful on its own without connecting to a server backend which runs the actual game logic (and handles payment etc). That way the game client isn't really the important part, people could copy this for free or even write their own client if they want, but in the end they need to connect to your game server to "run the game". Just don't accidentally leak the game server ;)