Decentralization is not a boolean variable. The question should be how decentralized or disintermediated is the technology and at what points can control be taken by individuals? Most won't bother reading the white papers to figure this out though. Is mining centralized? I believe that mostly yes since ASIC's took over. But mining is not the only part. There are the merchants, the users, the nodes confirming transactions without mining, and also programmers. All of them want control, but control isn't complete.

So the question should be, is it decentralized enough? This can be a tricky question. Who can seize your funds? Decentralization doesn't automatically mean that you are in control. For instance, Bitshares is called "decentralized", however, if you check more closely, most of the time OpenLedger actually has control of your private keys. This isn't much better than using a fully centralized exchange such as Binance or Coinbase.

As for EOS, an intriguing project. Is it decentralized enough? Time will tell. The main question is, why only 21 block producers? Seems to me that it might not be hard to get collusion with such a low number. Yes they can be voted out (and not just every 4 years, but continuously). It's like fitting politicians with blockchain ankle bracelets. Should we call the BP's Block Producers or Bitware Politicians?

I think if more people understood how EOS worked, they would always vote for someone not in the top 21 currently and change their vote soon after, to always keep potential collusion at bay. History shows however, that once votes are set, they rarely change. Maybe a voting bot can be set up to accomplish that for the community to generate "randomized term limits".

As for "code is law" being a myth, nature has been the law of God for eons, and there are many bugs in nature. There's a tradeoff between security and freedom.