If you write the javascript code inside an anonymous function, outside code by the user can't interact with it.

However, the user can still use javascript to manipulate the dom, and hence the canvas (I think).