That was my experience when we needed something.
Dont get me started on docs and operations.
Eg: Using Azure we found out the hard way that the Firewall was cutting connections after 5m of inactivity. Changing that setting? Their docs are wrong, stack overflow kindof helps, but to fix it we had to use windows based tooling in a vm since their linux based stuff didnt work.
I know this will happen sooner or later with anybody, but on average the experience with GCP was superb.
I do agree re: certs. That is the only thing I really hate, doing LE when they could run this for you. But they will launch an SSL solutio since they have one now for AppEngine.