Take Google, for instance. What is Google's moat? Well, they have at least three:

They have tens of millions of lines of code. An AI and ten hungry devs are not going to match that by next Friday, not even if we don't bother to restrict which year the Friday is in.

Google also has data. That's a moat that AI can't get you around, and neither can the devs.

And Google has google.com, which is hardwired into some browsers and lots of peoples' fingertips.

Yes, there are still moats. Maybe less than their used to be, maybe easier to cross, but there still are some, and they still matter.