Actually, since any device can and does have multiple IPv6 addresses and can easily get more, blocking individual IPv6 address is ineffective. Some services choose to block /64 so the collateral damage is not reduced in any way.
Is blocking a /64 a fundamental limitation? I dont see how it is relevant otherwise.