Airgapped computer, it's the only way to be sure.