I vote +1 for the proposal to remove firewall-config from the default
install.
In addition, we can do some things to 'soften the blow':
- Make sure that the firewall-config tool has good app data
- Make sure that it shows up in searches for relevant terms: firewall,
network, iptables,...