CWP doesn't control CSF, never has, never will.
Which is good & bad about CWP, they allow you to choose and customize most of the features (Apache, PHP, ModSecurity, Nginx, MariaDB, etc.)
But we are trying to get them to incorporate this fork into CWP, instead of the dead one.
Then there are also CSF forks, that people have made paid, against the GPL. That some people may choose as well.