[...]
FWIW, I have an additional system fully open to the Internet but configured as an IPv6 only system.
I use a public NAT64/DNS64 service for access to non-IPv6.  Owing to the number of IPv6 addresses, I assume,
it has never been probed by the ssh script kiddies.