Now do IPv6
Even if we scan just the first address of each /64, it’s still about 2^56. Unlikely anyone is ever going to do it.
This is another thing I like about IPv6. Makes mass address scanning completely useless.
And that’s a detail, but SLAAC as in RFC4842 is deterministic. The randomization is introduced by the privacy extensions in RFC4941.
But in general devices using SLAAC are not typically the things you are looking for when scanning.