Platform Concentration Risk: Cloudflare, VPNs, and Chokepoints

Spain's judicial blocking of Cloudflare to enforce football streaming rights caused Docker Hub to become inaccessible as collateral damage, breaking CI/CD pipelines across the country. The thread was not subtle: 'Cloudflare is cancer. And the tumor is now too big.' A related thread on Obscura VPN, which is essentially a reseller layer on top of Mullvad, generated skepticism about single points of failure in privacy infrastructure.

The through-line connecting these threads is concentration risk. Too much of the internet routes through Cloudflare, too much AI tooling routes through a handful of APIs, and too many developer workflows depend on services that can be disrupted by court orders in a jurisdiction you've never thought about. Docker Hub being inaccessible in Spain because of a La Liga judge is a concrete example of how this plays out.

The FCC IoT security thread from years ago resurfaced with similar energy around who gets to decide what devices can and cannot do, and what happens when centralized control of infrastructure meets political pressure.