This works through websockets. So if you (the client) can access this website, you can RDP to your machines.
Quick search seems to suggest the HTTP fallback persists: https://glyptodon.org/jira/browse/GUAC-1474
btw. @op go-http-tunnel would provides you with great base for a "branded" ngrok like client for your users.