[semi-extrinsic]

Is both SSH and USB key / USB DVD burner usage completely disabled on your corporate devices? If not, obvious workaround is obvious.

[ptaipale]

That obvious workaround doesn't give you a 24/7 hole from the Internet. To copy information, you need a person to knowingly do it. This decreases the attack surface tremendously.

[rocqua]

Even a full mitm solution doesn't MitM the sneakernet.

[Intermernet]

Ah yes, but a literal MitM solution could!