Isn’t this argument against ALG not NAT? You could have ALG with IPv6 no NAT involved, with the router enforcing deny all inbound unless ports explicitly opened (such as via this SIP ALG request).