People have tried to just "code around" these centralization issues, but Facebook/Google have a lot of developers that can put a lot of time into identifying/rate-limiting/blocking unauthorized use of their API's. Nothing has been able to get past the "but does it work almost all the time" barrier that those engineering efforts put in the way to technically circumventing centralizaiton.