In IPv4, virtually every home or office network is located behind a NAT router, where outbound traffic (and its response traffic) can pass, but traffic starting outside your local network will reach inside your own network (for good or bad) only if a virtual server/port forwarding is set (either manually or through uPnP).
When installing a fresh copy of Windows XP, then it is almost impossible to update it over the internet without catching some kind of virus before the computer is updated enough to be protected by itself, unless the computer if protected behind a NAT firewall.
With ipv6, NAT becomes "obsolete" as "expansion" of the internet address space.
But, from a security point of view, what functionality would be needed in a consumer router to give a similar protection in a ipv6 network?