[ubermon]

Moat does not come from compile time but runtime. The company, the operation, and the accumulated data, the brand, the trust and the reputation.

[solarmist]

There are technology moats as well, but for the most part, you're correct. Everything else usually matters much more.