I wonder if having only an IPv6 address would provide enough obscurity to be reasonably secure in this case? Or maybe those allocations are still to publicly guessable?