Can a protector only fire trustees? If so, that means to appoint a new trustee, an existing trustee has to be the one to do it, yes?

No, a protector can fire and then hire the replacement trustee.  He must follow the rules: if he fires a related trustee then he can hire a related trustee.  But if un-related, he must replace with non-related trustee.