As I understand things, you need to somehow encrypt your app - because, as you point out, decompiling the source isn't all that difficult.
I don't know the specifics behind the process, but you might check out Sencha Space which provides a secure wrapper for your apps.