If I provided users with an IPv6 block to allowlist for my apps, I think most IT directors' heads would explode, but _everything_ works with 32 bit CIDR ranges.

I certainly support it, but I'm not sure we'll see an end to NAT for some time, even with an IPv6 option.