[blueredmodern]

You generally want to avoid getting malware into your network, but it is even more important to avoid allowing for exfiltration of data. So the "copy via USB-stick" serves a purpose and makes it MUCH harder to exfiltrate data.

[razakel]

Use a DVD-R with a read-only drive on the air-gapped machine. Much easier to audit than an evil USB.