Air-gap isolation does not depend on the correctness of configuration, and therefore cannot be bypassed by network-layer configuration flaws, but it introduces significant engineering costs such as requiring data transfer via physical media.