Note that using ultrasound as a communication mechanism, which is what's being described here, is very different from using it as an infection vector.
It's an interesting idea I think, which will have more applications in the future than it does now as more computers start to be always on, listening and watching, but mostly because audio or video is not an infection vector we take seriously yet in the same way that we do network infection.
That would be one hell of an exploit.
It would be quite impressive, though, if a vulnerability in an audio driver allowed an uninfected computer to be infected simply by "hearing" the exploit sound!
It's not as significant as one might imagine.
But it does have the significance that you still have to worry whether your air-gapped machine is infected since it could secretly leak info even unplugged.