> The model is just a powerless token generator without a harness.

Which is why real-world deployments will have harnesses, and of course no full air gap. People want to use it to do things. Now what?