Hi,
I'm pretty sure varbinary data type is supported. At least it was in 2008-2008R2 and I didn't see it deprecated.
In any case be careful using it: http://blogs.msdn.com/b/repltalk/archive/2010/02/02/sql-server-merge-replication-best-practices.aspx...