RemoteDB is not safe to use from TMS Web Core, just because of the architecture of final application. You SQL statements will be visible from the browser and also any user with credentials could execute arbitrary SQL statements.
You should use XData. You don't need to use Aurelius, XData is a generic Rest/Json framework, Aurelius is just a helper - which you can still use to retrieve simple data. But you can simply use SQL statements: