The inconsistency and 'laziness' of base LLMs is a major hurdle. The best application-layer companies differentiate themselves not by just wrapping a model, but by building a complex harness that ensures the right amount of intelligence is reliably applied to a specific user task, creating a defensible product.

Simply offering the latest model is no longer a competitive advantage. True value is created in the system built around the model—the system prompts, tools, and overall scaffolding. This 'harness' is what optimizes a model's performance for specific tasks and delivers a superior user experience.

The notion of building a business as a 'thin wrapper' around a foundational model like GPT is flawed. Truly defensible AI products, like Cursor, build numerous specific, fine-tuned models to deeply understand a user's domain. This creates a data and performance moat that a generic model cannot easily replicate, much like Salesforce was more than just a 'thin wrapper' on a database.

The most defensible AI companies don't just have superior models; they embed themselves deeply into customer workflows. The primary barrier to adoption is change management, so overcoming that hurdle creates a durable competitive advantage that is difficult to displace.

The key for enterprises isn't integrating general AI like ChatGPT but creating "proprietary intelligence." This involves fine-tuning smaller, custom models on their unique internal data and workflows, creating a competitive moat that off-the-shelf solutions cannot replicate.

User stickiness for AI models is increasingly driven by the 'harness'—the custom prompts, workflows, and integrations built around a specific model. This ecosystem creates high switching costs, even when a competing model offers incrementally better performance.

The enduring moat in the AI stack lies in what is hardest to replicate. Since building foundation models is significantly more difficult than building applications on top of them, the model layer is inherently more defensible and will naturally capture more value over time.

In the AI era, defensibility comes from building a complex system of record, not just a thin wrapper on an LLM. Companies with a 'thick application layer' that offers standalone value are unattractive for model providers to replicate, whereas thin wrappers risk being absorbed by the platform they are built on.

The common critique of AI application companies as "GPT wrappers" with no moat is proving false. The best startups are evolving beyond using a single third-party model. They are using dozens of models and, crucially, are backward-integrating to build their own custom AI models optimized for their specific domain.