[quietbritishjim]

The other key detail missing is presumably that the workstation is not air gapped at all, just prevented from accessing the internet with some firewall rules.

For those that don't know: air gapped means completely disconnected, as in literally pull the network cable out the back and never back in again. File transfers have to happen using some physical medium (traditionally write-once CDs/DVDs). You can have an air gapped network so long as the machines are just connected to each other and there's no physical route whatsoever to the internet.