I had assumed that most people would block by /64. Probably safest to count distinct abusive/noisy IPv6s per /64 and block/throttle when it hits a threshold.

Ratio of abuse traffic per IPv6 from a /64 might also make a good threshold.