There’s two parts of this:
The upcoming requirement to support IPv6-only networks means that you must deal with the first issue. See the Supporting IPv6-only Networks pinned post for more background on this.
I don’t think there’s any requirement that you deal with the second issue. If your tunnel doesn’t claim any IPv6 routes, the system will route IPv6 in the normal way. However, you wrote:
(I do want to controll most traffic from the device)
and if you opt out of IPv6 routing then you’re not going to meet that requirement. Realistically, IPv6 is going to be an increasing part of the network environment over the next few years and you can’t afford to ignore it.
Share and Enjoy
—
Quinn “The Eskimo!”
Apple Developer Relations, Developer Technical Support, Core OS/Hardware
let myEmail = "eskimo" + "1" + "@apple.com"