

The “firewall” features are called connection tracking and, a firewall. With IPv6 I have my firewall setup very similar to NAT. Established and outgoing new connections are allowed (this is done using connection tracking). Incoming new connections are not allowed unless I open up a specific port.
Home firewalls SHOULD be setup the same for IPv6, a lot are not and IMO is the main problem right now.
With IPv6 for most use cases there’s actually more security. With privacy extensions (pretty sure it’s enabled on windows by default), when you make connections from your device, it uses a “private” IP. That is a randomly chosen address inside your network’s prefix, that changes regularly.
These addresses don’t accept incoming connections. You have a main address that doesn’t really change that you accept connections on. Firewall that for ports you want to allow and then hackers need to port scan 2^64 or 2^80 address space to find your real IPs in your prefix. If they capture your IP from a connection to a web server etc, they won’t have luck scanning you.
Again as per my post above, the biggest risk right now is bad default configurations on many home routers.