I'm glad you brought this up. When listening to the Cisco Live! 2013 keynote this year and I heard the call to move to IPv6 and connect everything on IoE I had two reactions; first I freaked out thinking about every device in the world having its own publicly accessible IP address.

Second, I realized I had just achieved lifetime employment on the security side. It's taken me years to grasp the limited understanding I have of IPv6 ( mostly unlearning from IPv4 )and the security implications are still unclear.

For example, on the *latest* Symantec Endpoint Protection (12.1.3), your choices for IPv6 filtering are ON or OFF for _all addresses_. I'm unable to say 'allow link local, block public'. :eyeroll:

Your comment about people's new comfort with putting everything online is interesting also. It's like pulling teeth to get people to use two step authentication.

To answer your question, my FUD comes from people's unclear understanding of these implications and just 'moving ahead'.