firewalld is just a management daemon with a dbus intrerface. nothing stops it from using iptables, nftables or bpfilter