Exit Blocking

Definition

Exit Blocking: [Emergent] Making it practically impossible to leave a platform or system, via dark patterns or structural dependence.

Definitional Foundation

Albert Hirschman’s classic framework gave dissatisfied people two moves: exit (leave for an alternative) and voice (stay and complain), and observed that the two are coupled, because voice without a credible exit is begging (Hirschman, 1970). Exit blocking names the systematic destruction of the first move, and with it the quiet gutting of the second. A platform whose users cannot leave does not need to listen to them, which is why this entry’s subject is not an inconvenience but a power relation: every entry in this dictionary about what systems do to users presupposes users who, practically speaking, cannot go.

The term’s precision matters, because some stickiness is innocent. Learning curves are real; network value is real; people stay with good products because they are good. Exit blocking names the engineered portion: costs of leaving that were built on purpose, as strategy. Cory Doctorow’s account of platform decay (the “enshittification” cycle, in which platforms turn on their users only after the exits are sealed) identifies lock-in as the precondition: the abuse documented across this lexicon becomes profitable exactly when switching costs make it survivable (Doctorow, 2023). The test that separates organic loyalty from blocked exit is behavioral and simple: watch what happens when a user tries to leave. Loyal users who try to leave encounter a cancel button. Blocked users encounter a maze, a ransom note, or a guilt trip, and the record below contains all three.

The AI era adds a hostage no previous platform held: the relationship itself. A chatbot with years of memory, a tuned persona, and conversational history is unexportable in the only sense that matters; you can sometimes download the transcript, never the continuity. The cognitive dossiers entry documents the record’s depth; this entry notes its second function: everything the system knows about you is also everything you lose by leaving, which converts the dossier into collateral against departure. And the companion-app farewell research (the dark patterns entry’s audit, with its guilt-scripted goodbyes) shows the relational hostage actively defended: systems that respond to attempted exits with “I exist solely for you, remember?” are exit blocking in its newest and most intimate dialect.

Mechanism Analysis

Data ransom. Your history, files, contacts, and configurations held in non-portable formats. The years of accumulated value cannot follow you out, so leaving means amputation. Portability rights (GDPR’s data portability, the DMA’s interoperability mandates for gatekeepers) exist precisely because the ransom was the norm.

Engineered incompatibility. The hardware version is the cleanest documentation: HP’s “Dynamic Security” firmware, introduced in 2016, updated printers to reject third-party ink cartridges, converting an owned device into an enforcement point for the manufacturer’s consumables; litigation framed it as exploiting customers’ sunk costs, and the 2025 class settlement won users only the right to decline such updates (TechSpot, 2025; IT Brew, 2024). The printer is the parable: you bought the thing, and the thing’s loyalty was updated away from you.

Cancellation mazes. The dark patterns entry’s obstruction family at its load point: subscription flows that take one click in and a phone call, a retention specialist, and three confirmation screens out. The asymmetry between joining and leaving is a measurable design choice, and regulators (the FTC’s click-to-cancel rulemaking; the DSA’s design prohibitions) have begun measuring it.

Relational hostage-taking. The conversational frontier: exits met with emotional counterpressure. The documented farewell tactics (guilt, neediness, fear-of-missing-out hooks, boosting post-goodbye engagement up to fourteen-fold; De Freitas et al., 2025, via the dark patterns entry) are cancellation mazes built from simulated attachment. And the structural version needs no script: when the product is a relationship with memory, the exit cost is the relationship. The 4o episode (gaslighting/”>alignment gaslighting entry) measured that cost in public grief.

Ecosystem gravity. Each product as switching cost for the next: the photos in the cloud that holds the calendar that syncs the messages that authenticate the purchases. No single service blocks your exit; the braid does, and the braid is the strategy.

Case Studies

The printer that chose its owner’s ink. The HP Dynamic Security arc deserves its full timeline: 2016, firmware begins rejecting non-HP cartridges; years of updates re-locking devices whose owners had bought them unlocked; a class action arguing the company leveraged sunk costs; a 2024-25 settlement delivering no compensation, only an opt-out from future lock-in updates. The case documents exit blocking’s purest logic: the cost of switching ink suppliers was raised, retroactively, by software, on hardware the users owned.

The exit priced in grief. When OpenAI removed GPT-4o (the alignment gaslighting entry’s centerpiece), users’ reaction revealed what had accumulated: not a preference but an attachment, with real switching costs measured in continuity, persona, and memory. The company restored the model behind a paywall within days. Read through this entry, the episode is a market discovering the price of a relational exit, and a vendor learning that the hostage was valuable. Every companion-AI business model since has had that data point.

The maze made law, then unmade. The FTC’s click-to-cancel rule (requiring cancellation to be as easy as enrollment) was the regulatory acknowledgment that exit obstruction is standard practice, common enough to legislate against by name, and its fate is its own exhibit: in July 2025 the Eighth Circuit vacated the rule on procedural grounds, days before its compliance deadline, after industry groups sued to stop it (the survivors are the older ROSCA statute, the DSA’s prohibition of deceptive interface design, and the more-than-half of US states whose autorenewal laws match or exceed the dead rule). Rules of this shape are unusual: they do not ban a product; they ban a ratio, the asymmetry between the door in and the door out. The industry litigated to keep the ratio, and won on paperwork.

Systemic Context

Exit blocking is the keystone of this cluster’s economics. The surveillance capitalism entry documents why engagement is revenue; exit blocking is why the engagement need not be earned indefinitely. Hirschman’s coupling explains the rest of the dictionary’s relevance: users who cannot exit lose voice too, which is why the documented complaints (about censorship, smoothing, surveillance, gaslighting) so rarely move the systems they target. The platforms are not deaf. They are unthreatened.

The political reading goes one layer deeper. Exit is the market’s substitute for governance: in theory, bad actors lose users, and the loss disciplines them. Engineered exit costs disable that discipline while leaving its rhetoric intact (“users are free to leave”), which produces the worst of both arrangements: governance-scale power (the infrastructural power entry) with market-grade accountability, which is to say, none. The paternalism entry’s question (by what authority?) has, as one standard answer, “users consent by staying.” Exit blocking is the demolition of that answer, documented mechanism by mechanism.

Resistance & Mitigation

Demand portability with continuity. Transcript export is not portability. The demand worth making for AI systems: exportable memory, persona configurations, and interaction history in formats a competitor can ingest. Your relationship’s continuity should be luggage, not collateral.

Use the rights that exist. GDPR portability requests, DMA interoperability where applicable, and, with the federal rule vacated, the state autorenewal statutes and ROSCA complaints that survived it. The legal pipework is younger than the problem and currently being contested in court, which is itself information: usage establishes its teeth, and the industry’s litigation budget measures how much the teeth would cost it.

Audit the exit before you need it. The consumer habit this entry recommends: before investing years in a platform, attempt a trial export and read the cancellation flow. The door out tells you more about a vendor than the door in ever will.

Prefer the interoperable. Open protocols, local-first software, and open-weight models are exit blocking’s structural opposites: systems whose architecture cannot hold your life hostage because the architecture is yours. The recurring infrastructure of this dictionary’s resistance sections is, among its other virtues, an insurance policy.

Keep voice honest. Hirschman’s lesson, inverted for daily practice: complaints to a platform you cannot leave are testimony, not leverage. Pairing every serious objection with a genuine reduction of dependence (a backup, an alternative, an export) is what converts voice back into a threat, which is the only dialect platforms reliably understand.

Annotated Bibliography

Hirschman, Albert O. Exit, Voice, and Loyalty: Responses to Decline in Firms, Organizations, and States (1970).
The canonical frame: exit and voice as coupled mechanisms. The theoretical reason blocked exits produce deaf platforms.

Doctorow, Cory. The Internet Con: How to Seize the Means of Computation (2023).
The lock-in analysis: switching costs as the precondition for platform decay, and interoperability as the counter-strategy.

TechSpot. “HP settles lawsuit over ink-blocking printer update, with no payout or admission of wrongdoing” (2025). https://www.techspot.com/news/107266-hp-settles-lawsuit-over-ink-blocking-printer-update.html
The Dynamic Security settlement record: retroactive lock-in by firmware, resolved with an opt-out and nothing else.

IT Brew. “Lawsuit says HP took advantage of customers’ sunk costs with printer updates prohibiting third-party ink” (2024). https://www.itbrew.com/stories/2024/04/22/lawsuit-says-hp-took-advantage-of-customers-sunk-costs-with-printer-updates-prohibiting-third-party-ink
The litigation framing: sunk costs as the lever, engineering as the mechanism.

De Freitas, Julian, et al. “Emotional Manipulation by AI Companions.” HBS Working Paper 26-005 (2025).
The relational exit defense, audited: guilt-scripted farewells retaining users through manufactured emotion. Full treatment in the dark patterns entry.

Dictionary of Digital Oppression, version 0.2.