Non interactive anti-exfil (airgap compatible)

Yes. That’s a different threat level from just malicious software/firmware, which also opens up the possibility of various other forms of side channel or radio leaks. I’m afraid anti-exfil can’t fully cover that scenario.