This question already has an answer here:
Apparently, for half a year already at least, my ISP has assigned me IPv6 addresses. I discovered this accidentally, while editing Wikipedia. So it seems my ISP started to support IPv6 addresses and decided it was a good time to give them out to users. (Unlike my college collegues, who are crazed with IPv6 shiny newness, I wasn't asking for this.)
Now pardon my incompetence.... But, AFAIK, unlike IPv4 addresses, IPv6 addresses do not use NAT and instead, are all directly routable from the Internet. Is this correct?
If the computer is directly routable to the internet (a very bad idea in this day and age), common vulnerable ports will be scanned by bots and immediately exploited.
(source: this comment)
So it would seem that, contrary to IPv4 addresses, IPv6 addresses are inherently insecure; or rather, they are only as secure as the router's hardware. Is this correct?