Offline networks reduce remote exposure, but removable media, insider access, supply-chain flaws, firmware trust, and side channels still define the real attack surface.