It is not easy to build a moat without colloration with the platform, since security or permission features rely on adding stuff on the platform.