And how do you prevent someone spamming your devices or is the risk so low you don't care?

That's the job of a firewall and is unchanged between ipv4 and IPv6. Theyre both equally vulnerable to denial of service attacks