Re: Airgap shit
Airgaps include scanning removable media for viruses, and not allowing autorun facilities. Stuxnet was a state sponsored hacking tool deliberately designed to wreck infrastructure.
If you have a nation state determined to infiltrate your systems you'd better be certain that all your security is watertight.
Which includes making sure systems are fully up to date. So, fuck off.
For practically everyone else, an airgap suffices.