&gt; IPv6 doesn&#x27;t take away your stateful firewall, and NAT isn&#x27;t providing ANY security.<p>That&#x27;s not really true. By its nature, stateful&#x2F;dynamic NAT, which is what the majority of the consumer world is using, means internal services aren&#x27;t exposed to the Internet. Short of layer 7 stateful packet inspection, or some other IDSy type thing, a consumer-focused &#x27;firewall&#x27; isn&#x27;t going to do any better... they have to be generic and fuss-free. Just go back to the early 00s or mid-90s to see the ramifications that exposing ports from Windows machines to the Internet had, then tell me NAT  hasn&#x27;t had a positive security impact.