Upstream Python 3.9 will EOL 2025-10. RHEL 9/Rocky 9 Python “3.9” will EOL 2032-05 and will be kept secure all the way.
The “Python 3.9” in RHEL 9 is not the upstream version. It is something that was forked from upstream version by Red Hat into separate branch that is maintained by RH with backports: https://access.redhat.com/solutions/57665
One simply does not mess with the core components (like nftable) of Enterprise Linux. If one does, the result is no more EL, will probably break, and you can keep the pieces (preferably isolated from all networks).