[phinnaeus]

NAT is not a firewall. There's no reason you can't hide your LAN from a WAN connection with IPv6.

[flyinghamster]

Exactly right. When I enabled IPv6 on my home LAN, I made very sure that only those hosts (and ports!) I wanted open were available to the outside world. Otherwise, incoming IPv6 is DROP by default.