The most important thing is to protect your infra and update your product to latest version to make it less vulnerable. So private ip with NAT is good idea as it will reach to internet and take update from there. If vcenter is your in-house product, not deployed in a public space, I don't think it's a good idea to have a public ip.
Regards,
Sachchidanand
