SFTP uses SSH instead, and trades off FTP's fun firewalling for the requirement to transmit a certificate out of band or just implicitly trust the first ever connection - it uses certificate pinning, ...