NAT requires a stateful firewall too. In fact all router firewalls are stateful otherwise you’d have to have large ranges of ports permanently open to incoming connections.

So you don’t actually need anything different nor special to have the same level of security with IPv6 vs IPv4 + NAT.