So in this case the best practice is to make UFW a dependency and delegate all routing to it? And if I don't want to use UFW or I am on a distro with another f

So in this case the best practice is to make UFW a dependency and delegate all routing to it? And if I don't want to use UFW or I am on a distro with another firewall, let alone an upstream firewall or other solution, tough luck?