I found this about ipf at a web page, (note that this comment is an year
old)

very poor ipv6 mbuf handling
almost impossible bi-directional bridge handling
weak  grammar configuration
brittle userland code

Is this still the case?

pf implements many recommendations from
http://www.aciri.org/vern/papers.html