[scarier]

This is already a common practice. One of the issues with the standard implementation is that it’s set up as an administrative control rather than an engineering control (which would be significantly more difficult/expensive/space-consuming). At least one other comment thread has discussed the airlock implementation that I’m sure a very large number of people have independently thought of.