I'm sure they all do. Whether an air gap is warranted is evidently less obvious.
These companies keep shrieking that LLM agents will hack everything and kill us all if we let them get out uncontrolled. They then continue to run these agents with vague tasks and "sandbox" them with way too much access.
Either they are lying and not that scared of these agents, or they are so stupid that they don't do the one obvious fix.
It's patently obvious at this point.