How secure is port forwarding

I have a few clients with simple needs that dont want to buy new routers with VPN etc, in otherwords spend money.

How secure is it to port forward on the default or alternate port to remote desktop into a workstation or windows2K server?

And would you run any additional security updates or software?

thanx in advance