Well, even the internals have issues. Take Openshift as the most extreme example - it's a fork of K8s, with a lot of custom functionality like scc and routes,

Well, even the internals have issues. Take Openshift as the most extreme example - it's a fork of K8s, with a lot of custom functionality like scc and routes, and also a lot of custom behavior like its admission controllers that manage pod security contexts. It's almost like a different version of k8s - things that will run on GKE or vanilla k8s won't work on Openshift. Yet, it is CNCF compliant.