The back and forth was a little confusing to me.

I forward/open IPv4 & IPv6 as needed, limited to trusted sources.

I allow IPv6 ICMP from approved countries. IIRC, this functionality goes beyond the needs of SLAAC and RA. It is a required criteria for IPv6 testing sites - but I'm not clear why.