First, fire the person and make it known elsewhere in the company why they were fired. This should dissuade people from trying again.
Export as Binary is only a partial solution. The jsxbin file can still be copied and run elsewhere, it just hides the jsx source.