So you've chosen volence!
fail2ban supports many more uses, but requires too much attention to configurecorrectly; benevolence is opinionated, so you don't have to be.
Opinions* nft > iptables* logs should be low noise; banning noisy hosts helps* lying is proof of malign intent* binary logs are dumb* firewall configuration isn't benevolence's job