There is barely any legacy hardware/software that doesn't work with IPv6. It's just not an issue.
Dual-stack is also the default, and CG-NAT exists as a fallback. For IPv6 only websites there is still the option to use a HTTP proxy.
Dual-stack is also the default, and CG-NAT exists as a fallback. For IPv6 only websites there is still the option to use a HTTP proxy.
And that's not even counting the various integrators that just don't implement any kind of security at all.
I fight against this sort of thing all the time. Sometimes I get my way.