If you have another router in front doing NAT, then you'll want to use a virtual IP so you have a single IP address to NAT to.
If you only have outbound browsing, and you are not worried about NAT failover, then I would just use the uplink IP's. Using only the uplink IPs means you can survive the MX's going multi-master if something goes badly wrong. You can also create a loop free layer two topology of you don't suffer the delay of a spanning tree failove.
If you are terminating VPNs then virtual IP can make the VPNs recover faster on a failure.