Bottomley: Creating a home IPv6 network

I think many IPv6 home wifi routers have a checkbox to block incoming connections to give the same kind of experience as NAT, although in practice nearly any endpoint that is capable of IPv6 communication is also capable of having a host-based packet-filter to protect itself. Windows, Mac and Linux have local firewalls out of the box, mobile devices must have local security because they connect to hostile networks all the time and I could see the use for IPv6 IoT devices to have a network-level filter, as they are often poorly secured, but even without a packet filter, without DNS, upstream flow analysis or server logs, it's harder (but not impossible) to find the endpoint addresses than in IPv4 to attack them directly in a way that can be mitigated by filtering on the router.