Agreed. We use Pulumi and it's fine, but the state-managing feels brittle.

I think the state-of-the-art is Kubernetes + jsonnet, though you still need to suffer through the learning curve and you'll still need TF and company to provision some of your cloud resources.