You are right, most VPS provider for instance, don't give just one IPv6, but a full range. One might be able to implement a spamming server with rotating IPv6.

Spamhaus has released a "blocking strategy" for IPv6 to exactly address this issue: https://www.spamhaus.org/news/article/668/spamhaus-releases-...