The size of a moat befits the size of a castle it protects. Coke absolutely has a moat, but it's not big enough to defend Coke as a trillion dollar company.
The question isn't whether OpenAI has a moat or not, it's if its current moat is big enough to protect a trillion-dollar company.