Morningstar's Largest-Ever Moat Review: 37 Downgrades and the Two Upgrades That Matter More

Morningstar's largest moat review since the firm began rating competitive advantages produced 37 downgrades and two upgrades, and the ratio is the argument: when AI compresses the cost of producing software outputs, application-layer moats narrow, but the infrastructure those applications traverse becomes more critical and more defensible. The buried signal isn't the fair value cuts to Adobe or Salesforce, which the market had already priced in before Morningstar's methodology caught up. It's that CrowdStrike and Cloudflare widened their moats specifically because AI expands the attack surface and network complexity that security infrastructure must handle, the same dynamic that makes Ramp's Anthropic data legible, where the product handling more sensitive enterprise workloads commands premium pricing that cheaper alternatives can't replicate. MIT CSAIL's finding that compute efficiency varies 40x between labs at the frontier adds the infrastructure layer: if the models themselves are inconsistent, the verification and security tooling sitting between model outputs and production systems becomes the new scarce layer. What AI compresses at the application surface, it reconstitutes as a harder, less visible moat one layer down.