@nprofile1q... oh actually more vaguely remembering time - there's iptables the original and iptables-via-nftables shim
I have no idea which of these is better, but fairly certain the behaviour is different in surprising ways.
(also libvirt does something similar but I think they support nftables already?)