You definitely use a firewall, but there’s no need for NAT in almost all cades with ipv6. But even with a firewall, p2p becomes easier even if you still have to do firewall hole punching