The firewall appliance is part of the problem. The legacy stack is all of it.
When static perimeters were a thing, networking and security vendors sold organizations products to fix an IT need or problem. That fix would expose a gap somewhere else, so the market named the gap, built a category around it, and organizations were sold another product to plug it. That model didn’t age well as environments changed.