In the end it depends on your risk profile and adversary model. Usually it’s not a good idea though. Why not have an SSH tunnel to the network/machine and use port forwarding to forward the RDP connection? Or why not use SSH for remote access, period?
I’m sorry, did you just say “mute the ads”? Damn, america really is in the terminal stages of late stage capitalism