the stuxnet attack had a significantly higher level of sophistication than this. if your threat is a competent nation state the bar is much much higher.
If it was airgapped it wouldn't be available to easily be used by a nation state to attack infrastructure in case of other simultaneous attacks.