Air-gapped computers that remain unconnected from the internet (and all other networks) are still very low risk. They mostly only remain vulnerable to physical possession attacks (although yes, it's still possible to record what you're typing by various external spying devices).