MSCI

MSCI's moat is strongest where its indexes act as institutional standards rather than simple datasets. Once an asset owner, ETF issuer, consultant, or mandate references an MSCI benchmark, switching can require governance review, client communication, performance-history translation, and operational rewiring.

Barra risk models add another layer of stickiness because they are embedded in portfolio risk systems, factor exposure reporting, optimizer workflows, and compliance processes. Open tools can replicate pieces of analytics, but replacing the accepted benchmark or risk-model convention is harder than replacing software alone.

MSCI's business is mostly informational and methodological, so parts of the stack are technically decentralizable: security masters, factor models, backtests, risk engines, benchmark construction, and data lineage can be implemented with open-source software and public or cooperative datasets.

The harder part is social coordination. Indexes are valuable because many institutions agree to use the same definitions. A decentralized replacement would need credible governance, transparent methodology changes, survivorship-bias controls, audited data pipelines, and enough adoption by allocators to become a shared reference point.