> wildly negligent to not be running it in a physically-airgapped environment

Why should it be physically airgapped? Clients won't be doing that.

Because they are testing it and are expected to erect guardrails before releasing.