What would your hypothetical egress arbitrage look like? Keep in mind we are specifically talking about cloudfront bandwidth - so being able to route to an upstream without that upstream also paying for bandwidth likely is not possible.
1. Run a proxy in your VPC and redirect all CF requests to someone elses VPC
2. ????
3. Profit! (assuming you charged them >2.1c/g)