I came to say something like this. Doesn't anyone in the valley know what the f*ck a data diode is, and why you need them? Preventing ingress or egress of control with a fairly simple piece of kit, and having the laws of physics enforce your decision as to data direction should be standard practice.

A data diode with an air-gapped network, is all you need to stop even ASI from breaching containment.

  --provided the humans interacting with it aren't stupid