In theory, air-gaps can be circumvented by bribing or blackmailing people, which is in reach for an LLM/agent.