You are correct, you just need to make sure that VMs at protected site running vSphere ESXi 6.7 do not run on virtual hardware version higher than 13, otherwise the VMs will not be able to boot at protected site running vSphere ESXi 6.5, since the it supports only virtual hardware version 13 and lower: Virtual Machine Compatibility