It's not necessarily air-gapped. There are many ways to accidentally or deliberately patch the intranet and internet together.