The setup you describe, a default deny firewall, is in fact how consumer routers operate. It's not something you need to configure yourself - router manufacturers do this by default, as recommended by RFC 6092. The idea that IPv6 home networks are "wide open to the internet" is a myth.