Wow, am I getting this right? It handles NAT traversal for you behind the IPV6 address for free??
When you mean incoming tunnel, it's no different from the many dynamic DNS solutions, where it's again up to you to integrate that. But even for this they have something: