One of the major benefits of spice over vnc, as implemented by RHEV anyway, is that it allows for an SSL connection from client to server. Currently it looks like the HTML5 client is using the non-ssl port, so it removes the added security.