There's a whole class of SAAS that's relatively well protected and that is everything that has to do with proprietry, hard to get data. For example a big cyber company like CrowdStrike could (and probably does) decare that its impossible to clone its cyber solution because their solutions and algorithms were trained on and improved on tons of clients data. So there's that - the data moat. Other than that I suppose everything that's a pain in the butt to duplicate - lots of regulation, tax codes etc etc. Think Shopify for instance, it's not just cloning the UI and some CRUD you need to clone a whole shitload of boring backend work that deals with this shit - and then keep a bunch of agents to constanty supervise regulation and update the software (And perhaps have a few humans overseeing the whole process); is it worth having the agents + few humans in the loop over paying for Shopify ? Currently - I doubt it. When agent costs plummet to almost zero and you dont need any humans in the loop - yes, probably worth it. We're not there yet.