people don't care about false positives on CGNAT either, so not much difference to the IPv4 situation if you target /64s