It seems really lame to airgap a system and not have some rigorous way of preventing USB infection. Isn’t that a really well-known vulnerability?