[Arnavion]

Note that for the sake of blocking internet clients, there's no point blocking a /128. Just start at /64. Blocking a /128 is basically useless because of SLAAC.

[Avamander]

Some cloud providers only give out /128 so it's fair to start blocking just a /128 at first.