Apart from security issues, performance issues may occur as well.
If cost is the driver and after discussion the cost argument is still stronger than any other, then it would make better sense to install GRC on a SOLMAN environment (if possible) as most likely your ECC SAP system is your most critical system.