Hacker News Reader

Moat does not come from compile time but runtime. The company, the operation, and the accumulated data, the brand, the trust and the reputation.

There are technology moats as well, but for the most part, you're correct. Everything else usually matters much more.