> Disable IPv6: this approach relies on ARP, which IPv6 doesn't use
This makes me kind of sad. Even if it’s just for a private/local usage. IPv6 has the features of ARP built in via “neighborhood discovery protocol” (NDP) with the addition of various security to prevent spoofing.