I see why people might say it but "Bluesky is centralized" isn't an especially accurate criticism. The protocol allows essentially any aspect of Bluesky to be decentralized, up to and including starting a competing service that still interoperates with Bluesky users—no permission required.