One of the larger issues, beyond performance, is that a remote desktop connection (whether through citrix or through RDP) carries a different set of security implications than a VPN does.