I'm planning to run BGP with my upstream provider and advertise our global IPv6 prefixes. I'd like to use only link-local addresses between the ISP's router and my border router to make the border router "invisible" to the Internet and thereby reduce the attack surface.

Has anyone else tried this? Are there pitfalls I should be aware of?