One restriction I can think of is with history log (if in use). Just make sure that variableinstanceinfo table has enough column size to store the object data (which is anyway stored as string).
When it comes runtime I believe they are stored together with process instance as bytes so it should be already safe as that is stored as blob.
HTH