Indeed, requiring the air-gapped machine to first running malware doesn't exactly make this revolutionary, and the bandwidth is so incredibly low. Also, likelihood of ambient interference is quite high that the reliability of this seems suspect best.