1. Same thing, ban the entire &#x2F;64, or &#x2F;48. Now it&#x27;s similar to banning an IPv4 address.<p>2. Hacked device on the other side of the firewall has been an issue even with NAT. NAT + firewall is not some magic unicorn, if someone gains access to a device behind your NAT + firewall they are still on your local network. No change there.<p>3. Most users will use Wifi at home, thus have an IP address that can be tracked. My exit IP for my T-Mobile phone is almost always the same too when I am in the same location...