its alot better now with NLS and rendezvous but still got limitations such as got to use the *.
cloud.com url limted auth methods AD or AD+Token or Azure AD unless you use your on prem ADC as a IDP, its ok if your doing simply ica proxy but what about if your using clientless access/fulll vpn / rdp proxy and complex nfactor configurations ? i normally suggest the gateway service for small-medium orgs who only just use ica proxy