I think the other moat is access to non-public data. If you can train, measure, or make decisions based on specific data that the vibecoder trying to clone you can't get, you can keep ahead.