I agree that solving the confidentiality part is key. I think it's very remote that someone will steal large swaths of code from you. But it might be a good idea to expect that your code example will act as part of "payment" for their review. If it bothers the author, maybe code review sessions can be broken up by individual functions/pages/modules that are looked at by many independent reviewers so no one reviewer sees it together as a package.