I'm concerned about privacy implications. Let's say that I'm a dissident somewhere. I'm using VPN services, JonDonym, Tor, etc to help obscure my identity. But then maybe WebRTC or whatever reveals the device IPv6.

I'm sure that it's possible to generate a new IPv6 for each session. But it's yet another pitfall for the unwary. For now, I just disable and firewall.