Update: Renaming ‘Firewall’ to ‘Z-Firewall’ via the KDE Menu Editor has put Firewall below Firefox, and I’m using that as a workaround.

It’s pretty odd, since Firewall should already be below Firefox alphabetically. But there you go!

edit: ‘.Firewall’ works as well.