"Improper" default IPv6 configuration is BS, as is the related security "issue". It worked by default like IPv6 is supposed to work. Routers and firewalls are two different things. When security firms start confusing this...we're in trouble.
Now we have to deal with a default IPv6 configuration that has all the same problems as IPv4. Meh.