Please don’t add too many services to Digital Ocean ;)
It's obviously an incredible platform with excellent tooling, and it probably powers most of the websites I use. But like most trades the same job can be done to a similar standard at a variety of scales using wildly different processes and tooling. And that's fine. The economics seem to be inverted (AWS is large scale and quite expensive in my experience while DO is smaller and cheaper), but it's also not a perfect analogy. I just won't begrudge anyone for using a tool or process I don't love. If it gets your blog or multi-million dollar revenue product online, that's awesome.
I'm glad I can say I used some AWS stuff on my resume, but for my own work I'd only use it if it had a clear advantage over whatever else I'm using.
The thing I am proposing about the ACL on firewall already exists in DO - but it only exists for the droplets. I don't think it would be too hard for them to port it over for the firewall too without making things too complicated.
I know DO is just stretching their legs on hosted solutions beyond simple storage and droplets (compute), but these are two features I'd rather not manage myself, that have some pretty big value.
Being API compatible to AWS (or even GCP/Azure) would be relatively big... that said, would just be nice additions that would round things out a lot imho. I don't think I am really wanting for anything else (since DBaaS with PostgreSQL started).