iptables on the face is easy to use. But at scale becomes difficult to use.

Also iptables does much more than just firewalls and can become a confusing tool.

Also, in a large enterprise organization the firewall guy is different than the software engineering team which is different than architect.