pizzle85:
If that works for you, great! That's why we document how VMRC works.
I'll give you two caveats that you have to evaluate for your environment.
1) vRA interposes on the connections because we also want to do host hiding - e.g. prevent vRA end users from being routable to VC or ESX hosts. It sounds like you can accept that exposure. (And it is that hiding specifically that prevents the remote ISO access).
2) The direct-to-VC VMRC link carries a full VC user session - it's not *used* for anything except console access to a single VM, but is credentialed for access to all VMs associated with that VC user. If you can accept that exposure, you are fine; vRA as a product cannot.