Both are fine. Ufw has a set of applications that are defined in terms of what ports they need for convenience. You wouldn’t have to know that 3389 is for RDP, you could just allow RDP. Ufw ultimately modifies the iptables, it is just another interface for interacting with it.